import * as pulumi from "@pulumi/pulumi";
import * as inputs from "../types/input";
export interface ProviderEnhancedValidation {
    /**
     * Should the AzureRM Provider validate location arguments against the list of supported Azure Locations? When enabled, invalid locations are caught at plan time; when disabled, they are caught at apply time.
     */
    locations?: pulumi.Input<boolean>;
    /**
     * Should the AzureRM Provider validate Resource Provider arguments against the list of supported Resource Providers? When enabled, invalid resource providers are caught at plan time; when disabled, they are caught at apply time.
     */
    resourceProviders?: pulumi.Input<boolean>;
}
export interface ProviderFeatures {
    apiManagement?: pulumi.Input<inputs.ProviderFeaturesApiManagement>;
    appConfiguration?: pulumi.Input<inputs.ProviderFeaturesAppConfiguration>;
    applicationInsights?: pulumi.Input<inputs.ProviderFeaturesApplicationInsights>;
    cognitiveAccount?: pulumi.Input<inputs.ProviderFeaturesCognitiveAccount>;
    databricksWorkspace?: pulumi.Input<inputs.ProviderFeaturesDatabricksWorkspace>;
    keyVault?: pulumi.Input<inputs.ProviderFeaturesKeyVault>;
    logAnalyticsWorkspace?: pulumi.Input<inputs.ProviderFeaturesLogAnalyticsWorkspace>;
    machineLearning?: pulumi.Input<inputs.ProviderFeaturesMachineLearning>;
    managedDisk?: pulumi.Input<inputs.ProviderFeaturesManagedDisk>;
    netapp?: pulumi.Input<inputs.ProviderFeaturesNetapp>;
    postgresqlFlexibleServer?: pulumi.Input<inputs.ProviderFeaturesPostgresqlFlexibleServer>;
    recoveryService?: pulumi.Input<inputs.ProviderFeaturesRecoveryService>;
    recoveryServicesVaults?: pulumi.Input<inputs.ProviderFeaturesRecoveryServicesVaults>;
    resourceGroup?: pulumi.Input<inputs.ProviderFeaturesResourceGroup>;
    storage?: pulumi.Input<inputs.ProviderFeaturesStorage>;
    subscription?: pulumi.Input<inputs.ProviderFeaturesSubscription>;
    templateDeployment?: pulumi.Input<inputs.ProviderFeaturesTemplateDeployment>;
    virtualMachine?: pulumi.Input<inputs.ProviderFeaturesVirtualMachine>;
    virtualMachineScaleSet?: pulumi.Input<inputs.ProviderFeaturesVirtualMachineScaleSet>;
}
export interface ProviderFeaturesApiManagement {
    purgeSoftDeleteOnDestroy?: pulumi.Input<boolean>;
    recoverSoftDeleted?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesAppConfiguration {
    purgeSoftDeleteOnDestroy?: pulumi.Input<boolean>;
    recoverSoftDeleted?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesApplicationInsights {
    disableGeneratedRule?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesCognitiveAccount {
    purgeSoftDeleteOnDestroy?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesDatabricksWorkspace {
    /**
     * When enabled, the managed resource group that contains the Unity Catalog data will be forcibly deleted when the workspace is destroyed, regardless of contents.
     */
    forceDelete?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesKeyVault {
    /**
     * When enabled soft-deleted `azure.keyvault.KeyVault` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeleteOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Certificate` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeletedCertificatesOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeletedHardwareSecurityModuleKeysOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModule` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeletedHardwareSecurityModulesOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Key` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeletedKeysOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Secret` resources will be permanently deleted (e.g purged), when destroyed
     */
    purgeSoftDeletedSecretsOnDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Certificate` resources will be restored, instead of creating new ones
     */
    recoverSoftDeletedCertificates?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.ManagedHardwareSecurityModuleKey` resources will be restored, instead of creating new ones
     */
    recoverSoftDeletedHardwareSecurityModuleKeys?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.KeyVault` resources will be restored, instead of creating new ones
     */
    recoverSoftDeletedKeyVaults?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Key` resources will be restored, instead of creating new ones
     */
    recoverSoftDeletedKeys?: pulumi.Input<boolean>;
    /**
     * When enabled soft-deleted `azure.keyvault.Secret` resources will be restored, instead of creating new ones
     */
    recoverSoftDeletedSecrets?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesLogAnalyticsWorkspace {
    permanentlyDeleteOnDestroy?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesMachineLearning {
    purgeSoftDeletedWorkspaceOnDestroy?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesManagedDisk {
    expandWithoutDowntime?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesNetapp {
    /**
     * When enabled, backups will be deleted when the `azure.netapp.BackupVault` resource is destroyed
     */
    deleteBackupsOnBackupVaultDestroy?: pulumi.Input<boolean>;
    /**
     * When enabled, the volume will not be destroyed, safeguarding from severe data loss
     */
    preventVolumeDestruction?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesPostgresqlFlexibleServer {
    restartServerOnConfigurationValueChange?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesRecoveryService {
    purgeProtectedItemsFromVaultOnDestroy?: pulumi.Input<boolean>;
    vmBackupStopProtectionAndRetainDataOnDestroy?: pulumi.Input<boolean>;
    vmBackupSuspendProtectionAndRetainDataOnDestroy?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesRecoveryServicesVaults {
    recoverSoftDeletedBackupProtectedVm?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesResourceGroup {
    preventDeletionIfContainsResources?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesStorage {
    dataPlaneAvailable?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesSubscription {
    preventCancellationOnDestroy?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesTemplateDeployment {
    deleteNestedItemsDuringDeletion: pulumi.Input<boolean>;
}
export interface ProviderFeaturesVirtualMachine {
    deleteOsDiskOnDeletion?: pulumi.Input<boolean>;
    detachImplicitDataDiskOnDeletion?: pulumi.Input<boolean>;
    /**
     * @deprecated 'graceful_shutdown' has been deprecated and will be removed from v5.0 of the AzureRM provider.
     */
    gracefulShutdown?: pulumi.Input<boolean>;
    skipShutdownAndForceDelete?: pulumi.Input<boolean>;
}
export interface ProviderFeaturesVirtualMachineScaleSet {
    forceDelete?: pulumi.Input<boolean>;
    reimageOnManualUpgrade?: pulumi.Input<boolean>;
    rollInstancesWhenRequired?: pulumi.Input<boolean>;
    scaleToZeroBeforeDeletion?: pulumi.Input<boolean>;
}
export declare namespace advisor {
}
export declare namespace aifoundry {
    interface HubEncryption {
        /**
         * The Key Vault URI to access the encryption key.
         */
        keyId: pulumi.Input<string>;
        /**
         * The Key Vault ID where the customer owned encryption key exists.
         */
        keyVaultId: pulumi.Input<string>;
        /**
         * The user assigned identity ID that has access to the encryption key.
         *
         * > **Note:** `userAssignedIdentityId` must be set when`identity.type` is `UserAssigned` in order for the service to find the assigned permissions.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface HubIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Hub.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this AI Foundry Hub. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface HubManagedNetwork {
        /**
         * The isolation mode of the AI Foundry Hub. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
         */
        isolationMode?: pulumi.Input<string>;
    }
    interface ProjectIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Foundry Project.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this AI Foundry Project. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace analysisservices {
    interface ServerIpv4FirewallRule {
        /**
         * Specifies the name of the firewall rule.
         */
        name: pulumi.Input<string>;
        /**
         * End of the firewall rule range as IPv4 address.
         */
        rangeEnd: pulumi.Input<string>;
        /**
         * Start of the firewall rule range as IPv4 address.
         */
        rangeStart: pulumi.Input<string>;
    }
}
export declare namespace apimanagement {
    interface ApiContact {
        /**
         * The email address of the contact person/organization.
         */
        email?: pulumi.Input<string>;
        /**
         * The name of the contact person/organization.
         */
        name?: pulumi.Input<string>;
        /**
         * Absolute URL of the contact information.
         */
        url?: pulumi.Input<string>;
    }
    interface ApiDiagnosticBackendRequest {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendRequestDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiDiagnosticBackendRequestDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendRequestDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendRequestDataMaskingQueryParam>[]>;
    }
    interface ApiDiagnosticBackendRequestDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticBackendRequestDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticBackendResponse {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendResponseDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiDiagnosticBackendResponseDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendResponseDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticBackendResponseDataMaskingQueryParam>[]>;
    }
    interface ApiDiagnosticBackendResponseDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticBackendResponseDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticFrontendRequest {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendRequestDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiDiagnosticFrontendRequestDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendRequestDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendRequestDataMaskingQueryParam>[]>;
    }
    interface ApiDiagnosticFrontendRequestDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticFrontendRequestDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticFrontendResponse {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendResponseDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiDiagnosticFrontendResponseDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendResponseDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiDiagnosticFrontendResponseDataMaskingQueryParam>[]>;
    }
    interface ApiDiagnosticFrontendResponseDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiDiagnosticFrontendResponseDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface ApiImport {
        /**
         * The format of the content from which the API Definition should be imported. Possible values are: `openapi`, `openapi+json`, `openapi+json-link`, `openapi-link`, `swagger-json`, `swagger-link-json`, `wadl-link-json`, `wadl-xml`, `wsdl` and `wsdl-link`.
         */
        contentFormat: pulumi.Input<string>;
        /**
         * The Content from which the API Definition should be imported. When a `contentFormat` of `*-link-*` is specified this must be a URL, otherwise this must be defined inline. The URL must be accessible and return a valid document; otherwise, deployment may fail.
         */
        contentValue: pulumi.Input<string>;
        /**
         * A `wsdlSelector` block as defined below, which allows you to limit the import of a WSDL to only a subset of the document. This can only be specified when `contentFormat` is `wsdl` or `wsdl-link`.
         */
        wsdlSelector?: pulumi.Input<inputs.apimanagement.ApiImportWsdlSelector>;
    }
    interface ApiImportWsdlSelector {
        /**
         * The name of endpoint (port) to import from WSDL.
         */
        endpointName: pulumi.Input<string>;
        /**
         * The name of service to import from WSDL.
         */
        serviceName: pulumi.Input<string>;
    }
    interface ApiLicense {
        /**
         * The name of the license .
         */
        name?: pulumi.Input<string>;
        /**
         * Absolute URL of the license.
         */
        url?: pulumi.Input<string>;
    }
    interface ApiOauth2Authorization {
        /**
         * OAuth authorization server identifier. The name of an OAuth2 Authorization Server.
         */
        authorizationServerName: pulumi.Input<string>;
        /**
         * Operations scope.
         */
        scope?: pulumi.Input<string>;
    }
    interface ApiOpenidAuthentication {
        /**
         * How to send token to the server. A list of zero or more methods. Valid values are `authorizationHeader` and `query`.
         */
        bearerTokenSendingMethods?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * OpenID Connect provider identifier. The name of an OpenID Connect Provider.
         */
        openidProviderName: pulumi.Input<string>;
    }
    interface ApiOperationRequest {
        /**
         * A description of the HTTP Request, which may include HTML tags.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `header` blocks as defined above.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestHeader>[]>;
        /**
         * One or more `queryParameter` blocks as defined above.
         */
        queryParameters?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestQueryParameter>[]>;
        /**
         * One or more `representation` blocks as defined below.
         */
        representations?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestRepresentation>[]>;
    }
    interface ApiOperationRequestHeader {
        /**
         * The default value for this Header.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Header.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestHeaderExample>[]>;
        /**
         * The Name of this Header.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Header Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Header, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Header.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationRequestHeaderExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationRequestQueryParameter {
        /**
         * The default value for this Query Parameter.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Query Parameter.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestQueryParameterExample>[]>;
        /**
         * The Name of this Query Parameter.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Query Parameter Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Query Parameter, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Query Parameter.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationRequestQueryParameterExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationRequestRepresentation {
        /**
         * The Content Type of this representation, such as `application/json`.
         */
        contentType: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestRepresentationExample>[]>;
        /**
         * One or more `formParameter` block as defined above.
         *
         * > **Note:** This is Required when `contentType` is set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        formParameters?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestRepresentationFormParameter>[]>;
        /**
         * The ID of an API Management Schema which represents this Response.
         *
         * > **Note:** This can only be specified when `contentType` is not set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type Name defined by the Schema.
         *
         * > **Note:** This can only be specified when `contentType` is not set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        typeName?: pulumi.Input<string>;
    }
    interface ApiOperationRequestRepresentationExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationRequestRepresentationFormParameter {
        /**
         * The default value for this Form Parameter.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Form Parameter.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationRequestRepresentationFormParameterExample>[]>;
        /**
         * The Name of this Form Parameter.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Form Parameter Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Form Parameter, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Form Parameter.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationRequestRepresentationFormParameterExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationResponse {
        /**
         * A description of the HTTP Response, which may include HTML tags.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `header` blocks as defined above.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseHeader>[]>;
        /**
         * One or more `representation` blocks as defined above.
         */
        representations?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseRepresentation>[]>;
        /**
         * The HTTP Status Code.
         */
        statusCode: pulumi.Input<number>;
    }
    interface ApiOperationResponseHeader {
        /**
         * The default value for this Header.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Header.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseHeaderExample>[]>;
        /**
         * The Name of this Header.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Header Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Header, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Header.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationResponseHeaderExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationResponseRepresentation {
        /**
         * The Content Type of this representation, such as `application/json`.
         */
        contentType: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseRepresentationExample>[]>;
        /**
         * One or more `formParameter` block as defined above.
         *
         * > **Note:** This is Required when `contentType` is set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        formParameters?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseRepresentationFormParameter>[]>;
        /**
         * The ID of an API Management Schema which represents this Response.
         *
         * > **Note:** This can only be specified when `contentType` is not set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type Name defined by the Schema.
         *
         * > **Note:** This can only be specified when `contentType` is not set to `application/x-www-form-urlencoded` or `multipart/form-data`.
         */
        typeName?: pulumi.Input<string>;
    }
    interface ApiOperationResponseRepresentationExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationResponseRepresentationFormParameter {
        /**
         * The default value for this Form Parameter.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Form Parameter.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationResponseRepresentationFormParameterExample>[]>;
        /**
         * The Name of this Form Parameter.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Form Parameter Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Form Parameter, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Form Parameter.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationResponseRepresentationFormParameterExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiOperationTemplateParameter {
        /**
         * The default value for this Template Parameter.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * A description of this Template Parameter.
         */
        description?: pulumi.Input<string>;
        /**
         * One or more `example` blocks as defined above.
         */
        examples?: pulumi.Input<pulumi.Input<inputs.apimanagement.ApiOperationTemplateParameterExample>[]>;
        /**
         * The Name of this Template Parameter.
         */
        name: pulumi.Input<string>;
        /**
         * Is this Template Parameter Required?
         */
        required: pulumi.Input<boolean>;
        /**
         * The name of the Schema.
         */
        schemaId?: pulumi.Input<string>;
        /**
         * The Type of this Template Parameter, such as a `string`.
         */
        type: pulumi.Input<string>;
        /**
         * The type name defined by the Schema.
         */
        typeName?: pulumi.Input<string>;
        /**
         * One or more acceptable values for this Template Parameter.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApiOperationTemplateParameterExample {
        /**
         * A long description for this example.
         */
        description?: pulumi.Input<string>;
        /**
         * A URL that points to the literal example.
         */
        externalValue?: pulumi.Input<string>;
        /**
         * The name of this example.
         */
        name: pulumi.Input<string>;
        /**
         * A short description for this example.
         */
        summary?: pulumi.Input<string>;
        /**
         * The example of the representation.
         */
        value?: pulumi.Input<string>;
    }
    interface ApiSubscriptionKeyParameterNames {
        /**
         * The name of the HTTP Header which should be used for the Subscription Key.
         */
        header: pulumi.Input<string>;
        /**
         * The name of the QueryString parameter which should be used for the Subscription Key.
         */
        query: pulumi.Input<string>;
    }
    interface AuthorizationServerTokenBodyParameter {
        /**
         * The Name of the Parameter.
         */
        name: pulumi.Input<string>;
        /**
         * The Value of the Parameter.
         */
        value: pulumi.Input<string>;
    }
    interface BackendCircuitBreakerRule {
        /**
         * Specifies whether the circuit breaker should honor `Retry-After` requests. Defaults to `false`.
         */
        acceptRetryAfterEnabled?: pulumi.Input<boolean>;
        /**
         * A `failureCondition` block as defined below.
         */
        failureCondition: pulumi.Input<inputs.apimanagement.BackendCircuitBreakerRuleFailureCondition>;
        /**
         * The name of the circuit breaker rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the duration for which the circuit remains open before retrying, in ISO 8601 format.
         */
        tripDuration: pulumi.Input<string>;
    }
    interface BackendCircuitBreakerRuleFailureCondition {
        /**
         * Specifies the number of failures within the specified interval that will trigger the circuit breaker. Possible values are between `1` and `10000`.
         */
        count?: pulumi.Input<number>;
        /**
         * Specifies a list of error reasons to consider as failures.
         */
        errorReasons?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the time window over which failures are counted, in ISO 8601 format.
         */
        intervalDuration: pulumi.Input<string>;
        /**
         * Specifies the percentage of failures within the specified interval that will trigger the circuit breaker. Possible values are between `1` and `100`.
         *
         * > **Note:** Exactly one of `percentage` or `count` must be specified.
         */
        percentage?: pulumi.Input<number>;
        /**
         * One or more `statusCodeRange` blocks as defined below.
         *
         * > **Note:** At least one of `statusCodeRange`, and `errorReasons` must be set.
         */
        statusCodeRanges?: pulumi.Input<pulumi.Input<inputs.apimanagement.BackendCircuitBreakerRuleFailureConditionStatusCodeRange>[]>;
    }
    interface BackendCircuitBreakerRuleFailureConditionStatusCodeRange {
        /**
         * Specifies the maximum HTTP status code to consider as a failure. Possible values are between `200` and `599`.
         */
        max: pulumi.Input<number>;
        /**
         * Specifies the minimum HTTP status code to consider as a failure. Possible values are between `200` and `599`.
         */
        min: pulumi.Input<number>;
    }
    interface BackendCredentials {
        /**
         * An `authorization` block as defined below.
         */
        authorization?: pulumi.Input<inputs.apimanagement.BackendCredentialsAuthorization>;
        /**
         * A list of client certificate thumbprints to present to the backend host. The certificates must exist within the API Management Service.
         */
        certificates?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A mapping of header parameters to pass to the backend host. The keys are the header names and the values are a comma separated string of header values. This is converted to a list before being passed to the API.
         */
        header?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * A mapping of query parameters to pass to the backend host. The keys are the query names and the values are a comma separated string of query values. This is converted to a list before being passed to the API.
         */
        query?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface BackendCredentialsAuthorization {
        /**
         * The authentication Parameter value.
         */
        parameter?: pulumi.Input<string>;
        /**
         * The authentication Scheme name.
         */
        scheme?: pulumi.Input<string>;
    }
    interface BackendProxy {
        /**
         * The password to connect to the proxy server.
         */
        password?: pulumi.Input<string>;
        /**
         * The URL of the proxy server.
         */
        url: pulumi.Input<string>;
        /**
         * The username to connect to the proxy server.
         */
        username: pulumi.Input<string>;
    }
    interface BackendServiceFabricCluster {
        /**
         * The client certificate resource id for the management endpoint.
         *
         * > **Note:** At least one of `clientCertificateThumbprint`, and `clientCertificateId` must be set.
         */
        clientCertificateId?: pulumi.Input<string>;
        /**
         * The client certificate thumbprint for the management endpoint.
         */
        clientCertificateThumbprint?: pulumi.Input<string>;
        /**
         * A list of cluster management endpoints.
         */
        managementEndpoints: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The maximum number of retries when attempting resolve the partition.
         */
        maxPartitionResolutionRetries: pulumi.Input<number>;
        /**
         * A list of thumbprints of the server certificates of the Service Fabric cluster.
         */
        serverCertificateThumbprints?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `serverX509Name` blocks as documented below.
         */
        serverX509Names?: pulumi.Input<pulumi.Input<inputs.apimanagement.BackendServiceFabricClusterServerX509Name>[]>;
    }
    interface BackendServiceFabricClusterServerX509Name {
        /**
         * The thumbprint for the issuer of the certificate.
         */
        issuerCertificateThumbprint: pulumi.Input<string>;
        /**
         * The common name of the certificate.
         */
        name: pulumi.Input<string>;
    }
    interface BackendTls {
        /**
         * Flag indicating whether SSL certificate chain validation should be done when using self-signed certificates for the backend host.
         */
        validateCertificateChain?: pulumi.Input<boolean>;
        /**
         * Flag indicating whether SSL certificate name validation should be done when using self-signed certificates for the backend host.
         */
        validateCertificateName?: pulumi.Input<boolean>;
    }
    interface CustomDomainDeveloperPortal {
        /**
         * The Base64 Encoded Certificate. (Mutually exclusive with `keyVaultId`.)
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         */
        certificatePassword?: pulumi.Input<string>;
        certificateSource?: pulumi.Input<string>;
        certificateStatus?: pulumi.Input<string>;
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the corresponding endpoint.
         */
        hostName: pulumi.Input<string>;
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be should be of the type application/x-pkcs12.
         *
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **NOTE:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        subject?: pulumi.Input<string>;
        thumbprint?: pulumi.Input<string>;
    }
    interface CustomDomainGateway {
        /**
         * The Base64 Encoded Certificate. (Mutually exclusive with `keyVaultId`.)
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         */
        certificatePassword?: pulumi.Input<string>;
        certificateSource?: pulumi.Input<string>;
        certificateStatus?: pulumi.Input<string>;
        /**
         * Is the certificate associated with this Hostname the Default SSL Certificate? This is used when an SNI header isn't specified by a client. Defaults to `false`.
         */
        defaultSslBinding?: pulumi.Input<boolean>;
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the API Proxy Endpoint.
         */
        hostName: pulumi.Input<string>;
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be should be of the type application/x-pkcs12.
         *
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **NOTE:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        subject?: pulumi.Input<string>;
        thumbprint?: pulumi.Input<string>;
    }
    interface CustomDomainManagement {
        /**
         * The Base64 Encoded Certificate. (Mutually exclusive with `keyVaultId`.)
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         */
        certificatePassword?: pulumi.Input<string>;
        certificateSource?: pulumi.Input<string>;
        certificateStatus?: pulumi.Input<string>;
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the corresponding endpoint.
         */
        hostName: pulumi.Input<string>;
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be should be of the type application/x-pkcs12.
         *
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **NOTE:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        subject?: pulumi.Input<string>;
        thumbprint?: pulumi.Input<string>;
    }
    interface CustomDomainPortal {
        /**
         * The Base64 Encoded Certificate. (Mutually exclusive with `keyVaultId`.)
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         */
        certificatePassword?: pulumi.Input<string>;
        certificateSource?: pulumi.Input<string>;
        certificateStatus?: pulumi.Input<string>;
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the corresponding endpoint.
         */
        hostName: pulumi.Input<string>;
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be should be of the type application/x-pkcs12.
         *
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **NOTE:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        subject?: pulumi.Input<string>;
        thumbprint?: pulumi.Input<string>;
    }
    interface CustomDomainScm {
        /**
         * The Base64 Encoded Certificate. (Mutually exclusive with `keyVaultId`.)
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         */
        certificatePassword?: pulumi.Input<string>;
        certificateSource?: pulumi.Input<string>;
        certificateStatus?: pulumi.Input<string>;
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the corresponding endpoint.
         */
        hostName: pulumi.Input<string>;
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be should be of the type application/x-pkcs12.
         *
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **NOTE:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        subject?: pulumi.Input<string>;
        thumbprint?: pulumi.Input<string>;
    }
    interface DiagnosticBackendRequest {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.DiagnosticBackendRequestDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DiagnosticBackendRequestDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticBackendRequestDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticBackendRequestDataMaskingQueryParam>[]>;
    }
    interface DiagnosticBackendRequestDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticBackendRequestDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticBackendResponse {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.DiagnosticBackendResponseDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DiagnosticBackendResponseDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticBackendResponseDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticBackendResponseDataMaskingQueryParam>[]>;
    }
    interface DiagnosticBackendResponseDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticBackendResponseDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticFrontendRequest {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.DiagnosticFrontendRequestDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DiagnosticFrontendRequestDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticFrontendRequestDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticFrontendRequestDataMaskingQueryParam>[]>;
    }
    interface DiagnosticFrontendRequestDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticFrontendRequestDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticFrontendResponse {
        /**
         * Number of payload bytes to log (up to 8192).
         */
        bodyBytes?: pulumi.Input<number>;
        /**
         * A `dataMasking` block as defined below.
         */
        dataMasking?: pulumi.Input<inputs.apimanagement.DiagnosticFrontendResponseDataMasking>;
        /**
         * Specifies a list of headers to log.
         */
        headersToLogs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DiagnosticFrontendResponseDataMasking {
        /**
         * A `headers` block as defined below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticFrontendResponseDataMaskingHeader>[]>;
        /**
         * A `queryParams` block as defined below.
         */
        queryParams?: pulumi.Input<pulumi.Input<inputs.apimanagement.DiagnosticFrontendResponseDataMaskingQueryParam>[]>;
    }
    interface DiagnosticFrontendResponseDataMaskingHeader {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface DiagnosticFrontendResponseDataMaskingQueryParam {
        /**
         * The data masking mode. Possible values are `Mask` and `Hide` for `queryParams`. The only possible value is `Mask` for `headers`.
         */
        mode: pulumi.Input<string>;
        /**
         * The name of the header or the query parameter to mask.
         */
        value: pulumi.Input<string>;
    }
    interface GatewayLocationData {
        /**
         * The city or locality where the resource is located.
         */
        city?: pulumi.Input<string>;
        /**
         * The district, state, or province where the resource is located.
         */
        district?: pulumi.Input<string>;
        /**
         * A canonical name for the geographic or physical location.
         */
        name: pulumi.Input<string>;
        /**
         * The country or region where the resource is located.
         */
        region?: pulumi.Input<string>;
    }
    interface LoggerApplicationInsights {
        /**
         * The connection string of Application Insights.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The instrumentation key used to push data to Application Insights.
         *
         * > **Note:** Either `connectionString` or `instrumentationKey` have to be specified.
         */
        instrumentationKey?: pulumi.Input<string>;
    }
    interface LoggerEventhub {
        /**
         * The connection string of an EventHub Namespace.
         *
         * > **Note:** At least one of `connectionString` or `endpointUri` must be specified
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The endpoint address of an EventHub Namespace. Required when `clientId` is set.
         */
        endpointUri?: pulumi.Input<string>;
        /**
         * The name of an EventHub.
         */
        name: pulumi.Input<string>;
        /**
         * The Client Id of the User Assigned Identity with the "Azure Event Hubs Data Sender" role to the target EventHub Namespace. Required when `endpointUri` is set. If not specified the System Assigned Identity will be used.
         */
        userAssignedIdentityClientId?: pulumi.Input<string>;
    }
    interface NamedValueValueFromKeyVault {
        /**
         * The client ID of User Assigned Identity, for the API Management Service, which will be used to access the key vault secret. The System Assigned Identity will be used in absence.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * The resource ID of the Key Vault Secret.
         */
        secretId: pulumi.Input<string>;
    }
    interface ServiceAdditionalLocation {
        /**
         * The number of compute units in this region. Defaults to the capacity of the main region.
         */
        capacity?: pulumi.Input<number>;
        /**
         * Only valid for an Api Management service deployed in multiple locations. This can be used to disable the gateway in this additional location.
         */
        gatewayDisabled?: pulumi.Input<boolean>;
        /**
         * The URL of the Regional Gateway for the API Management Service in the specified region.
         */
        gatewayRegionalUrl?: pulumi.Input<string>;
        /**
         * The name of the Azure Region in which the API Management Service should be expanded to.
         */
        location: pulumi.Input<string>;
        /**
         * The Private IP addresses of the API Management Service. Available only when the API Manager instance is using Virtual Network mode.
         */
        privateIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * ID of a standard SKU IPv4 Public IP.
         *
         * > **Note:** Availability zones and custom public IPs are only supported in the Premium tier.
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * Public Static Load Balanced IP addresses of the API Management service in the additional location. Available only for Basic, Standard and Premium SKU.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `virtualNetworkConfiguration` block as defined below. Required when `virtualNetworkType` is `External` or `Internal`.
         */
        virtualNetworkConfiguration?: pulumi.Input<inputs.apimanagement.ServiceAdditionalLocationVirtualNetworkConfiguration>;
        /**
         * A list of availability zones.
         */
        zones?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ServiceAdditionalLocationVirtualNetworkConfiguration {
        /**
         * The id of the subnet that will be used for the API Management.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ServiceCertificate {
        /**
         * The password for the certificate.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The Base64 Encoded PFX or Base64 Encoded X.509 Certificate.
         */
        encodedCertificate: pulumi.Input<string>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The name of the Certificate Store where this certificate should be stored. Possible values are `CertificateAuthority` and `Root`.
         */
        storeName: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceDelegation {
        /**
         * Should subscription requests be delegated to an external url? Defaults to `false`.
         */
        subscriptionsEnabled?: pulumi.Input<boolean>;
        /**
         * The delegation URL.
         */
        url?: pulumi.Input<string>;
        /**
         * Should user registration requests be delegated to an external url? Defaults to `false`.
         */
        userRegistrationEnabled?: pulumi.Input<boolean>;
        /**
         * A base64-encoded validation key to validate, that a request is coming from Azure API Management.
         */
        validationKey?: pulumi.Input<string>;
    }
    interface ServiceHostnameConfiguration {
        /**
         * One or more `developerPortal` blocks as documented below.
         */
        developerPortals?: pulumi.Input<pulumi.Input<inputs.apimanagement.ServiceHostnameConfigurationDeveloperPortal>[]>;
        /**
         * One or more `management` blocks as documented below.
         */
        managements?: pulumi.Input<pulumi.Input<inputs.apimanagement.ServiceHostnameConfigurationManagement>[]>;
        /**
         * One or more `portal` blocks as documented below.
         */
        portals?: pulumi.Input<pulumi.Input<inputs.apimanagement.ServiceHostnameConfigurationPortal>[]>;
        /**
         * One or more `proxy` blocks as documented below.
         */
        proxies?: pulumi.Input<pulumi.Input<inputs.apimanagement.ServiceHostnameConfigurationProxy>[]>;
        /**
         * One or more `scm` blocks as documented below.
         */
        scms?: pulumi.Input<pulumi.Input<inputs.apimanagement.ServiceHostnameConfigurationScm>[]>;
    }
    interface ServiceHostnameConfigurationDeveloperPortal {
        /**
         * The Base64 Encoded Certificate.
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         *
         * > **Note:** Either `keyVaultCertificateId` or `certificate` and `certificatePassword` must be specified.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The source of the certificate.
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * The status of the certificate.
         */
        certificateStatus?: pulumi.Input<string>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the Management API.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be of the type `application/x-pkcs12`.
         *
         * > **Note:** Setting this field requires the `identity` block to be specified, since this identity is used for to retrieve the Key Vault Certificate. Possible values are versioned or versionless secret ID. Auto-updating the Certificate from the Key Vault requires the Secret version isn't specified.
         */
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **Note:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceHostnameConfigurationManagement {
        /**
         * The Base64 Encoded Certificate.
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         *
         * > **Note:** Either `keyVaultCertificateId` or `certificate` and `certificatePassword` must be specified.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The source of the certificate.
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * The status of the certificate.
         */
        certificateStatus?: pulumi.Input<string>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the Management API.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be of the type `application/x-pkcs12`.
         *
         * > **Note:** Setting this field requires the `identity` block to be specified, since this identity is used for to retrieve the Key Vault Certificate. Possible values are versioned or versionless secret ID. Auto-updating the Certificate from the Key Vault requires the Secret version isn't specified.
         */
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **Note:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceHostnameConfigurationPortal {
        /**
         * The Base64 Encoded Certificate.
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         *
         * > **Note:** Either `keyVaultCertificateId` or `certificate` and `certificatePassword` must be specified.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The source of the certificate.
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * The status of the certificate.
         */
        certificateStatus?: pulumi.Input<string>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the Management API.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be of the type `application/x-pkcs12`.
         *
         * > **Note:** Setting this field requires the `identity` block to be specified, since this identity is used for to retrieve the Key Vault Certificate. Possible values are versioned or versionless secret ID. Auto-updating the Certificate from the Key Vault requires the Secret version isn't specified.
         */
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **Note:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceHostnameConfigurationProxy {
        /**
         * The Base64 Encoded Certificate.
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         *
         * > **Note:** Either `keyVaultCertificateId` or `certificate` and `certificatePassword` must be specified.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The source of the certificate.
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * The status of the certificate.
         */
        certificateStatus?: pulumi.Input<string>;
        /**
         * Is the certificate associated with this Hostname the Default SSL Certificate? This is used when an SNI header isn't specified by a client. Defaults to `false`.
         */
        defaultSslBinding?: pulumi.Input<boolean>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the Management API.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be of the type `application/x-pkcs12`.
         *
         * > **Note:** Setting this field requires the `identity` block to be specified, since this identity is used for to retrieve the Key Vault Certificate. Auto-updating the Certificate from the Key Vault requires the Secret version isn't specified.
         */
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * The Managed Identity Client ID to use to access the Key Vault. This Identity must be specified in the `identity` block to be used.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceHostnameConfigurationScm {
        /**
         * The Base64 Encoded Certificate.
         */
        certificate?: pulumi.Input<string>;
        /**
         * The password associated with the certificate provided above.
         *
         * > **Note:** Either `keyVaultCertificateId` or `certificate` and `certificatePassword` must be specified.
         */
        certificatePassword?: pulumi.Input<string>;
        /**
         * The source of the certificate.
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * The status of the certificate.
         */
        certificateStatus?: pulumi.Input<string>;
        /**
         * The expiration date of the certificate in RFC3339 format: `2000-01-02T03:04:05Z`.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The Hostname to use for the Management API.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the SSL Certificate, which must be of the type `application/x-pkcs12`.
         *
         * > **Note:** Setting this field requires the `identity` block to be specified, since this identity is used for to retrieve the Key Vault Certificate. Possible values are versioned or versionless secret ID. Auto-updating the Certificate from the Key Vault requires the Secret version isn't specified.
         */
        keyVaultCertificateId?: pulumi.Input<string>;
        /**
         * @deprecated `keyVaultId` has been deprecated in favour of `keyVaultCertificateId` and will be removed in v5.0 of the AzureRM provider
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Should Client Certificate Negotiation be enabled for this Hostname? Defaults to `false`.
         */
        negotiateClientCertificate?: pulumi.Input<boolean>;
        /**
         * System or User Assigned Managed identity clientId as generated by Azure AD, which has `GET` access to the keyVault containing the SSL certificate.
         *
         * > **Note:** If a User Assigned Managed identity is specified for `sslKeyvaultIdentityClientId` then this identity must be associated to the `azure.apimanagement.Service` within an `identity` block.
         */
        sslKeyvaultIdentityClientId?: pulumi.Input<string>;
        /**
         * The subject of the certificate.
         */
        subject?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint?: pulumi.Input<string>;
    }
    interface ServiceIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this API Management Service.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The identifier for the tenant access information contract.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this API Management Service. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface ServiceProtocols {
        /**
         * @deprecated `protocols.enable_http2` has been deprecated in favour of the `protocols.http2_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableHttp2?: pulumi.Input<boolean>;
        /**
         * Should HTTP/2 be supported by the API Management Service? Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
    }
    interface ServiceSecurity {
        /**
         * Should SSL 3.0 be enabled on the backend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Ssl30` field
         */
        backendSsl30Enabled?: pulumi.Input<boolean>;
        /**
         * Should TLS 1.0 be enabled on the backend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls10` field
         */
        backendTls10Enabled?: pulumi.Input<boolean>;
        /**
         * Should TLS 1.1 be enabled on the backend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Backend.Protocols.Tls11` field
         */
        backendTls11Enabled?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_backend_ssl30` has been deprecated in favour of the `security.backend_ssl30_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableBackendSsl30?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_backend_tls10` has been deprecated in favour of the `security.backend_tls10_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableBackendTls10?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_backend_tls11` has been deprecated in favour of the `security.backend_tls11_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableBackendTls11?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_frontend_ssl30` has been deprecated in favour of the `security.frontend_ssl30_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableFrontendSsl30?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_frontend_tls10` has been deprecated in favour of the `security.frontend_tls10_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableFrontendTls10?: pulumi.Input<boolean>;
        /**
         * @deprecated `security.enable_frontend_tls11` has been deprecated in favour of the `security.frontend_tls11_enabled` property and will be removed in v5.0 of the AzureRM Provider
         */
        enableFrontendTls11?: pulumi.Input<boolean>;
        /**
         * Should SSL 3.0 be enabled on the frontend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Ssl30` field
         */
        frontendSsl30Enabled?: pulumi.Input<boolean>;
        /**
         * Should TLS 1.0 be enabled on the frontend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Tls10` field
         */
        frontendTls10Enabled?: pulumi.Input<boolean>;
        /**
         * Should TLS 1.1 be enabled on the frontend of the gateway? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Tls11` field
         */
        frontendTls11Enabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA` field
         */
        tlsEcdheEcdsaWithAes128CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA` field
         */
        tlsEcdheEcdsaWithAes256CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA` field
         */
        tlsEcdheRsaWithAes128CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA` field
         */
        tlsEcdheRsaWithAes256CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_128_CBC_SHA256` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_128_CBC_SHA256` field
         */
        tlsRsaWithAes128CbcSha256CiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_128_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_128_CBC_SHA` field
         */
        tlsRsaWithAes128CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_128_GCM_SHA256` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_128_GCM_SHA256` field
         */
        tlsRsaWithAes128GcmSha256CiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_256_CBC_SHA256` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_256_CBC_SHA256` field
         */
        tlsRsaWithAes256CbcSha256CiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_256_CBC_SHA` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_256_CBC_SHA` field
         */
        tlsRsaWithAes256CbcShaCiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_AES_256_GCM_SHA384` cipher be enabled? Defaults to `false`.
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TLS_RSA_WITH_AES_256_GCM_SHA384` field
         */
        tlsRsaWithAes256GcmSha384CiphersEnabled?: pulumi.Input<boolean>;
        /**
         * Should the `TLS_RSA_WITH_3DES_EDE_CBC_SHA` cipher be enabled for alL TLS versions (1.0, 1.1 and 1.2)?
         *
         * > **Note:** This maps to the `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Ciphers.TripleDes168` field
         */
        tripleDesCiphersEnabled?: pulumi.Input<boolean>;
    }
    interface ServiceSignIn {
        /**
         * Should anonymous users be redirected to the sign in page?
         */
        enabled: pulumi.Input<boolean>;
    }
    interface ServiceSignUp {
        /**
         * Can users sign up on the development portal?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `termsOfService` block as defined below.
         */
        termsOfService: pulumi.Input<inputs.apimanagement.ServiceSignUpTermsOfService>;
    }
    interface ServiceSignUpTermsOfService {
        /**
         * Should the user be asked for consent during sign up?
         */
        consentRequired: pulumi.Input<boolean>;
        /**
         * Should Terms of Service be displayed during sign up?.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * The Terms of Service which users are required to agree to in order to sign up.
         */
        text?: pulumi.Input<string>;
    }
    interface ServiceTenantAccess {
        /**
         * Should the access to the management API be enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Primary access key for the tenant access information contract.
         */
        primaryKey?: pulumi.Input<string>;
        /**
         * Secondary access key for the tenant access information contract.
         */
        secondaryKey?: pulumi.Input<string>;
        /**
         * The identifier for the tenant access information contract.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ServiceVirtualNetworkConfiguration {
        /**
         * The id of the subnet that will be used for the API Management.
         */
        subnetId: pulumi.Input<string>;
    }
    interface StandaloneGatewaySku {
        /**
         * The number of deployed units of the SKU. Defaults to `1`.
         */
        capacity?: pulumi.Input<number>;
        /**
         * The name of the SKU. The only possible value is `WorkspaceGatewayPremium`.
         */
        name: pulumi.Input<string>;
    }
    interface WorkspaceNamedValueValueFromKeyVault {
        /**
         * The client ID of the User Assigned Identity, for the API Management Service, which will be used to access the key vault secret. The System Assigned Identity will be used if not specified.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * The resource ID of the Key Vault Secret.
         */
        secretId: pulumi.Input<string>;
    }
}
export declare namespace appconfiguration {
    interface ConfigurationFeatureCustomFilter {
        /**
         * The name of the parameter, this could be any string.
         */
        name: pulumi.Input<string>;
        /**
         * One or more `parameters` blocks as defined below.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface ConfigurationFeatureTargetingFilter {
        /**
         * A number representing the percentage of the entire user base.
         */
        defaultRolloutPercentage: pulumi.Input<number>;
        /**
         * One or more `groups` blocks as defined below.
         */
        groups?: pulumi.Input<pulumi.Input<inputs.appconfiguration.ConfigurationFeatureTargetingFilterGroup>[]>;
        /**
         * A list of users to target for this feature.
         */
        users?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationFeatureTargetingFilterGroup {
        /**
         * The name of the group.
         */
        name: pulumi.Input<string>;
        /**
         * Rollout percentage of the group.
         */
        rolloutPercentage: pulumi.Input<number>;
    }
    interface ConfigurationFeatureTimewindowFilter {
        /**
         * The latest timestamp the feature is enabled. The timestamp must be in RFC3339 format.
         */
        end?: pulumi.Input<string>;
        /**
         * The earliest timestamp the feature is enabled. The timestamp must be in RFC3339 format.
         */
        start?: pulumi.Input<string>;
    }
    interface ConfigurationStoreEncryption {
        /**
         * Specifies the client ID of the identity which will be used to access key vault.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * Specifies the URI of the key vault key used to encrypt data.
         */
        keyVaultKeyIdentifier?: pulumi.Input<string>;
    }
    interface ConfigurationStoreIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this App Configuration.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this App Configuration. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface ConfigurationStorePrimaryReadKey {
        /**
         * The Connection String for this Access Key - consisting of the Endpoint, ID, and Secret.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The ID of the Access Key.
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret of the Access Key.
         */
        secret?: pulumi.Input<string>;
    }
    interface ConfigurationStorePrimaryWriteKey {
        /**
         * The Connection String for this Access Key - consisting of the Endpoint, ID, and Secret.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The ID of the Access Key.
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret of the Access Key.
         */
        secret?: pulumi.Input<string>;
    }
    interface ConfigurationStoreReplica {
        /**
         * The URL of the App Configuration Replica.
         */
        endpoint?: pulumi.Input<string>;
        /**
         * The ID of the Access Key.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the supported Azure location where the replica exists.
         */
        location: pulumi.Input<string>;
        /**
         * Specifies the name of the replica.
         */
        name: pulumi.Input<string>;
    }
    interface ConfigurationStoreSecondaryReadKey {
        /**
         * The Connection String for this Access Key - consisting of the Endpoint, ID, and Secret.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The ID of the Access Key.
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret of the Access Key.
         */
        secret?: pulumi.Input<string>;
    }
    interface ConfigurationStoreSecondaryWriteKey {
        /**
         * The Connection String for this Access Key - consisting of the Endpoint, ID, and Secret.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The ID of the Access Key.
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret of the Access Key.
         */
        secret?: pulumi.Input<string>;
    }
}
export declare namespace appinsights {
    interface StandardWebTestRequest {
        /**
         * The WebTest request body.
         */
        body?: pulumi.Input<string>;
        /**
         * Should the following of redirects be enabled? Defaults to `true`.
         */
        followRedirectsEnabled?: pulumi.Input<boolean>;
        /**
         * One or more `header` blocks as defined above.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.appinsights.StandardWebTestRequestHeader>[]>;
        /**
         * Which HTTP verb to use for the call. Options are 'GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'HEAD', and 'OPTIONS'. Defaults to `GET`.
         */
        httpVerb?: pulumi.Input<string>;
        /**
         * Should the parsing of dependend requests be enabled? Defaults to `true`.
         */
        parseDependentRequestsEnabled?: pulumi.Input<boolean>;
        /**
         * The WebTest request URL.
         */
        url: pulumi.Input<string>;
    }
    interface StandardWebTestRequestHeader {
        /**
         * The name which should be used for a header in the request.
         */
        name: pulumi.Input<string>;
        /**
         * The value which should be used for a header in the request.
         */
        value: pulumi.Input<string>;
    }
    interface StandardWebTestValidationRules {
        /**
         * A `content` block as defined above.
         */
        content?: pulumi.Input<inputs.appinsights.StandardWebTestValidationRulesContent>;
        /**
         * The expected status code of the response. Default is '200', '0' means 'response code < 400'
         */
        expectedStatusCode?: pulumi.Input<number>;
        /**
         * The number of days of SSL certificate validity remaining for the checked endpoint. If the certificate has a shorter remaining lifetime left, the test will fail. This number should be between 1 and 365.
         */
        sslCertRemainingLifetime?: pulumi.Input<number>;
        /**
         * Should the SSL check be enabled?
         */
        sslCheckEnabled?: pulumi.Input<boolean>;
    }
    interface StandardWebTestValidationRulesContent {
        /**
         * A string value containing the content to match on.
         */
        contentMatch: pulumi.Input<string>;
        /**
         * Ignore the casing in the `contentMatch` value.
         */
        ignoreCase?: pulumi.Input<boolean>;
        /**
         * If the content of `contentMatch` is found, pass the test. If set to `false`, the WebTest is failing if the content of `contentMatch` is found.
         */
        passIfTextFound?: pulumi.Input<boolean>;
    }
    interface WorkbookIdentity {
        /**
         * The list of User Assigned Managed Identity IDs assigned to this Workbook. Changing this forces a new resource to be created.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the System Assigned Managed Service Identity that is configured on this Workbook.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the System Assigned Managed Service Identity that is configured on this Workbook.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of Managed Service Identity that is configured on this Workbook. Possible values are `UserAssigned`, `SystemAssigned` and `SystemAssigned, UserAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface WorkbookTemplateGallery {
        /**
         * Category for the gallery.
         */
        category: pulumi.Input<string>;
        /**
         * Name of the workbook template in the gallery.
         */
        name: pulumi.Input<string>;
        /**
         * Order of the template within the gallery. Defaults to `0`.
         */
        order?: pulumi.Input<number>;
        /**
         * Azure resource type supported by the gallery. Defaults to `Azure Monitor`.
         */
        resourceType?: pulumi.Input<string>;
        /**
         * Type of workbook supported by the workbook template. Defaults to `workbook`.
         *
         * > **Note:** See [documentation](https://docs.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-automate#galleries) for more information of `resourceType` and `type`.
         */
        type?: pulumi.Input<string>;
    }
}
export declare namespace appplatform {
    interface SpringCloudApiPortalSso {
        /**
         * The public identifier for the application.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The secret known only to the application and the authorization server.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The URI of Issuer Identifier.
         */
        issuerUri?: pulumi.Input<string>;
        /**
         * It defines the specific actions applications can be allowed to do on a user's behalf.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SpringCloudAppCustomPersistentDisk {
        /**
         * These are the mount options for a persistent disk.
         */
        mountOptions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The mount path of the persistent disk.
         */
        mountPath: pulumi.Input<string>;
        /**
         * Indicates whether the persistent disk is a readOnly one.
         */
        readOnlyEnabled?: pulumi.Input<boolean>;
        /**
         * The share name of the Azure File share.
         */
        shareName: pulumi.Input<string>;
        /**
         * The name of the Spring Cloud Storage.
         */
        storageName: pulumi.Input<string>;
    }
    interface SpringCloudAppIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Spring Cloud Application.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Spring Cloud Application.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Spring Cloud Application.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Spring Cloud Application. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface SpringCloudAppIngressSettings {
        /**
         * Specifies how ingress should communicate with this app backend service. Allowed values are `GRPC` and `Default`. Defaults to `Default`.
         */
        backendProtocol?: pulumi.Input<string>;
        /**
         * Specifies the ingress read time out in seconds. Defaults to `300`.
         */
        readTimeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the ingress send time out in seconds. Defaults to `60`.
         */
        sendTimeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the type of the affinity, set this to `Cookie` to enable session affinity. Allowed values are `Cookie` and `None`. Defaults to `None`.
         */
        sessionAffinity?: pulumi.Input<string>;
        /**
         * Specifies the time in seconds until the cookie expires.
         */
        sessionCookieMaxAge?: pulumi.Input<number>;
    }
    interface SpringCloudAppPersistentDisk {
        /**
         * Specifies the mount path of the persistent disk. Defaults to `/persistent`.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * Specifies the size of the persistent disk in GB. Possible values are between `0` and `50`.
         */
        sizeInGb: pulumi.Input<number>;
    }
    interface SpringCloudBuildDeploymentQuota {
        /**
         * Specifies the required cpu of the Spring Cloud Deployment. Possible Values are `500m`, `1`, `2`, `3` and `4`. Defaults to `1` if not specified.
         *
         * > **Note:** `cpu` supports `500m` and `1` for Basic tier, `500m`, `1`, `2`, `3` and `4` for Standard tier.
         */
        cpu?: pulumi.Input<string>;
        /**
         * Specifies the required memory size of the Spring Cloud Deployment. Possible Values are `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi`. Defaults to `1Gi` if not specified.
         *
         * > **Note:** `memory` supports `512Mi`, `1Gi` and `2Gi` for Basic tier, `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi` for Standard tier.
         */
        memory?: pulumi.Input<string>;
    }
    interface SpringCloudBuildPackBindingLaunch {
        /**
         * Specifies a map of non-sensitive properties for launchProperties.
         */
        properties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a map of sensitive properties for launchProperties.
         */
        secrets?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface SpringCloudBuilderBuildPackGroup {
        /**
         * Specifies a list of the build pack's ID.
         */
        buildPackIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this build pack group.
         */
        name: pulumi.Input<string>;
    }
    interface SpringCloudBuilderStack {
        /**
         * Specifies the ID of the ClusterStack.
         */
        id: pulumi.Input<string>;
        /**
         * Specifies the version of the ClusterStack
         */
        version: pulumi.Input<string>;
    }
    interface SpringCloudConfigurationServiceRepository {
        /**
         * Specifies the ID of the Certificate Authority used when retrieving the Git Repository via HTTPS.
         */
        caCertificateId?: pulumi.Input<string>;
        /**
         * Specifies the SSH public key of git repository.
         */
        hostKey?: pulumi.Input<string>;
        /**
         * Specifies the SSH key algorithm of git repository.
         */
        hostKeyAlgorithm?: pulumi.Input<string>;
        /**
         * Specifies the label of the repository.
         */
        label: pulumi.Input<string>;
        /**
         * Specifies the name which should be used for this repository.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the password of git repository basic auth.
         */
        password?: pulumi.Input<string>;
        /**
         * Specifies the collection of patterns of the repository.
         */
        patterns: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the SSH private key of git repository.
         */
        privateKey?: pulumi.Input<string>;
        /**
         * Specifies a list of searching path of the repository
         */
        searchPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies whether enable the strict host key checking.
         */
        strictHostKeyChecking?: pulumi.Input<boolean>;
        /**
         * Specifies the URI of the repository.
         */
        uri: pulumi.Input<string>;
        /**
         * Specifies the username of git repository basic auth.
         */
        username?: pulumi.Input<string>;
    }
    interface SpringCloudConnectionAuthentication {
        /**
         * Service principal certificate for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalCertificate`.
         */
        certificate?: pulumi.Input<string>;
        /**
         * Client ID for `userAssignedIdentity` or `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`. When `type` is set to `userAssignedIdentity`, `clientId` and `subscriptionId` should be either both specified or both not specified.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Username or account name for secret auth. `name` and `secret` should be either both specified or both not specified when `type` is set to `secret`.
         */
        name?: pulumi.Input<string>;
        /**
         * Principal ID for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`.
         */
        principalId?: pulumi.Input<string>;
        /**
         * Password or account key for secret auth. `secret` and `name` should be either both specified or both not specified when `type` is set to `secret`.
         */
        secret?: pulumi.Input<string>;
        /**
         * Subscription ID for `userAssignedIdentity`. `subscriptionId` and `clientId` should be either both specified or both not specified.
         */
        subscriptionId?: pulumi.Input<string>;
        /**
         * The authentication type. Possible values are `systemAssignedIdentity`, `userAssignedIdentity`, `servicePrincipalSecret`, `servicePrincipalCertificate`, `secret`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface SpringCloudConnectionSecretStore {
        /**
         * The key vault id to store secret.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface SpringCloudContainerDeploymentQuota {
        /**
         * Specifies the required cpu of the Spring Cloud Deployment. Possible Values are `500m`, `1`, `2`, `3` and `4`. Defaults to `1` if not specified.
         *
         * > **Note:** `cpu` supports `500m` and `1` for Basic tier, `500m`, `1`, `2`, `3` and `4` for Standard tier.
         */
        cpu?: pulumi.Input<string>;
        /**
         * Specifies the required memory size of the Spring Cloud Deployment. Possible Values are `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi`. Defaults to `1Gi` if not specified.
         *
         * > **Note:** `memory` supports `512Mi`, `1Gi` and `2Gi` for Basic tier, `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi` for Standard tier.
         */
        memory?: pulumi.Input<string>;
    }
    interface SpringCloudCustomizedAcceleratorGitRepository {
        /**
         * A `basicAuth` block as defined below. Conflicts with `git_repository[0].ssh_auth`. Changing this forces a new Spring Cloud Customized Accelerator to be created.
         */
        basicAuth?: pulumi.Input<inputs.appplatform.SpringCloudCustomizedAcceleratorGitRepositoryBasicAuth>;
        /**
         * Specifies the Git repository branch to be used.
         */
        branch?: pulumi.Input<string>;
        /**
         * Specifies the ID of the CA Spring Cloud Certificate for https URL of Git repository.
         */
        caCertificateId?: pulumi.Input<string>;
        /**
         * Specifies the Git repository commit to be used.
         */
        commit?: pulumi.Input<string>;
        /**
         * Specifies the Git repository tag to be used.
         */
        gitTag?: pulumi.Input<string>;
        /**
         * Specifies the interval for checking for updates to Git or image repository. It should be greater than 10.
         */
        intervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the path under the git repository to be treated as the root directory of the accelerator or the fragment (depending on `acceleratorType`).
         */
        path?: pulumi.Input<string>;
        /**
         * A `sshAuth` block as defined below. Conflicts with `git_repository[0].basic_auth`. Changing this forces a new Spring Cloud Customized Accelerator to be created.
         */
        sshAuth?: pulumi.Input<inputs.appplatform.SpringCloudCustomizedAcceleratorGitRepositorySshAuth>;
        /**
         * Specifies Git repository URL for the accelerator.
         */
        url: pulumi.Input<string>;
    }
    interface SpringCloudCustomizedAcceleratorGitRepositoryBasicAuth {
        /**
         * Specifies the password of git repository basic auth.
         */
        password: pulumi.Input<string>;
        /**
         * Specifies the username of git repository basic auth.
         */
        username: pulumi.Input<string>;
    }
    interface SpringCloudCustomizedAcceleratorGitRepositorySshAuth {
        /**
         * Specifies the Public SSH Key of git repository basic auth.
         */
        hostKey?: pulumi.Input<string>;
        /**
         * Specifies the SSH Key algorithm of git repository basic auth.
         */
        hostKeyAlgorithm?: pulumi.Input<string>;
        /**
         * Specifies the Private SSH Key of git repository basic auth.
         */
        privateKey: pulumi.Input<string>;
    }
    interface SpringCloudDevToolPortalSso {
        /**
         * Specifies the public identifier for the application.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Specifies the secret known only to the application and the authorization server.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * Specifies the URI of a JSON file with generic OIDC provider configuration.
         */
        metadataUrl?: pulumi.Input<string>;
        /**
         * Specifies a list of specific actions applications can be allowed to do on a user's behalf.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SpringCloudGatewayApiMetadata {
        /**
         * Detailed description of the APIs available on the Gateway instance.
         */
        description?: pulumi.Input<string>;
        /**
         * Location of additional documentation for the APIs available on the Gateway instance.
         */
        documentationUrl?: pulumi.Input<string>;
        /**
         * Base URL that API consumers will use to access APIs on the Gateway instance.
         */
        serverUrl?: pulumi.Input<string>;
        /**
         * Specifies the title describing the context of the APIs available on the Gateway instance.
         */
        title?: pulumi.Input<string>;
        /**
         * Specifies the version of APIs available on this Gateway instance.
         */
        version?: pulumi.Input<string>;
    }
    interface SpringCloudGatewayClientAuthorization {
        /**
         * Specifies the Spring Cloud Certificate IDs of the Spring Cloud Gateway.
         */
        certificateIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies whether the client certificate verification is enabled.
         */
        verificationEnabled?: pulumi.Input<boolean>;
    }
    interface SpringCloudGatewayCors {
        /**
         * Allowed headers in cross-site requests. The special value `*` allows actual requests to send any header.
         */
        allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Allowed HTTP methods on cross-site requests. The special value `*` allows all methods. If not set, `GET` and `HEAD` are allowed by default. Possible values are `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS` and `PUT`.
         */
        allowedMethods?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Allowed origin patterns to make cross-site requests.
         */
        allowedOriginPatterns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Allowed origins to make cross-site requests. The special value `*` allows all domains.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * is user credentials are supported on cross-site requests?
         */
        credentialsAllowed?: pulumi.Input<boolean>;
        /**
         * HTTP response headers to expose for cross-site requests.
         */
        exposedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * How long, in seconds, the response from a pre-flight request can be cached by clients.
         */
        maxAgeSeconds?: pulumi.Input<number>;
    }
    interface SpringCloudGatewayLocalResponseCachePerInstance {
        /**
         * Specifies the maximum size of cache (10MB, 900KB, 1GB...) to determine if the cache needs to evict some entries.
         */
        size?: pulumi.Input<string>;
        /**
         * Specifies the time before a cached entry is expired (300s, 5m, 1h...).
         */
        timeToLive?: pulumi.Input<string>;
    }
    interface SpringCloudGatewayLocalResponseCachePerRoute {
        /**
         * Specifies the maximum size of cache (10MB, 900KB, 1GB...) to determine if the cache needs to evict some entries.
         */
        size?: pulumi.Input<string>;
        /**
         * Specifies the time before a cached entry is expired (300s, 5m, 1h...).
         */
        timeToLive?: pulumi.Input<string>;
    }
    interface SpringCloudGatewayQuota {
        /**
         * Specifies the required cpu of the Spring Cloud Deployment. Possible Values are `500m`, `1`, `2`, `3` and `4`. Defaults to `1` if not specified.
         *
         * > **Note:** `cpu` supports `500m` and `1` for Basic tier, `500m`, `1`, `2`, `3` and `4` for Standard tier.
         */
        cpu?: pulumi.Input<string>;
        /**
         * Specifies the required memory size of the Spring Cloud Deployment. Possible Values are `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi`. Defaults to `2Gi` if not specified.
         *
         * > **Note:** `memory` supports `512Mi`, `1Gi` and `2Gi` for Basic tier, `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi` for Standard tier.
         */
        memory?: pulumi.Input<string>;
    }
    interface SpringCloudGatewayRouteConfigOpenApi {
        /**
         * The URI of OpenAPI specification.
         */
        uri?: pulumi.Input<string>;
    }
    interface SpringCloudGatewayRouteConfigRoute {
        /**
         * Specifies the classification tags which will be applied to methods in the generated OpenAPI documentation.
         */
        classificationTags?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the description which will be applied to methods in the generated OpenAPI documentation.
         */
        description?: pulumi.Input<string>;
        /**
         * Specifies a list of filters which are used to modify the request before sending it to the target endpoint, or the received response.
         */
        filters?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the route processing order.
         */
        order: pulumi.Input<number>;
        /**
         * Specifies a list of conditions to evaluate a route for each request. Each predicate may be evaluated against request headers and parameter values. All of the predicates associated with a route must evaluate to true for the route to be matched to the request.
         */
        predicates?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the sso validation be enabled?
         */
        ssoValidationEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the title which will be applied to methods in the generated OpenAPI documentation.
         */
        title?: pulumi.Input<string>;
        /**
         * Should pass currently-authenticated user's identity token to application service?
         */
        tokenRelay?: pulumi.Input<boolean>;
        /**
         * Specifies the full uri which will override `appName`.
         */
        uri?: pulumi.Input<string>;
    }
    interface SpringCloudGatewaySso {
        /**
         * The public identifier for the application.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The secret known only to the application and the authorization server.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The URI of Issuer Identifier.
         */
        issuerUri?: pulumi.Input<string>;
        /**
         * It defines the specific actions applications can be allowed to do on a user's behalf.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SpringCloudJavaDeploymentQuota {
        /**
         * Specifies the required cpu of the Spring Cloud Deployment. Possible Values are `500m`, `1`, `2`, `3` and `4`. Defaults to `1` if not specified.
         *
         * > **Note:** `cpu` supports `500m` and `1` for Basic tier, `500m`, `1`, `2`, `3` and `4` for Standard tier.
         */
        cpu?: pulumi.Input<string>;
        /**
         * Specifies the required memory size of the Spring Cloud Deployment. Possible Values are `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi`. Defaults to `1Gi` if not specified.
         *
         * > **Note:** `memory` supports `512Mi`, `1Gi` and `2Gi` for Basic tier, `512Mi`, `1Gi`, `2Gi`, `3Gi`, `4Gi`, `5Gi`, `6Gi`, `7Gi`, and `8Gi` for Standard tier.
         */
        memory?: pulumi.Input<string>;
    }
    interface SpringCloudServiceConfigServerGitSetting {
        /**
         * A `httpBasicAuth` block as defined below.
         */
        httpBasicAuth?: pulumi.Input<inputs.appplatform.SpringCloudServiceConfigServerGitSettingHttpBasicAuth>;
        /**
         * The default label of the Git repository, should be the branch name, tag name, or commit-id of the repository.
         */
        label?: pulumi.Input<string>;
        /**
         * One or more `repository` blocks as defined below.
         */
        repositories?: pulumi.Input<pulumi.Input<inputs.appplatform.SpringCloudServiceConfigServerGitSettingRepository>[]>;
        /**
         * An array of strings used to search subdirectories of the Git repository.
         */
        searchPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `sshAuth` block as defined below.
         */
        sshAuth?: pulumi.Input<inputs.appplatform.SpringCloudServiceConfigServerGitSettingSshAuth>;
        /**
         * The URI of the default Git repository used as the Config Server back end, should be started with `http://`, `https://`, `git@`, or `ssh://`.
         */
        uri: pulumi.Input<string>;
    }
    interface SpringCloudServiceConfigServerGitSettingHttpBasicAuth {
        /**
         * The password used to access the Git repository server, required when the Git repository server supports HTTP Basic Authentication.
         */
        password: pulumi.Input<string>;
        /**
         * The username that's used to access the Git repository server, required when the Git repository server supports HTTP Basic Authentication.
         */
        username: pulumi.Input<string>;
    }
    interface SpringCloudServiceConfigServerGitSettingRepository {
        /**
         * A `httpBasicAuth` block as defined below.
         */
        httpBasicAuth?: pulumi.Input<inputs.appplatform.SpringCloudServiceConfigServerGitSettingRepositoryHttpBasicAuth>;
        /**
         * The default label of the Git repository, should be the branch name, tag name, or commit-id of the repository.
         */
        label?: pulumi.Input<string>;
        /**
         * A name to identify on the Git repository, required only if repos exists.
         */
        name: pulumi.Input<string>;
        /**
         * An array of strings used to match an application name. For each pattern, use the `{application}/{profile}` format with wildcards.
         */
        patterns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * An array of strings used to search subdirectories of the Git repository.
         */
        searchPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `sshAuth` block as defined below.
         */
        sshAuth?: pulumi.Input<inputs.appplatform.SpringCloudServiceConfigServerGitSettingRepositorySshAuth>;
        /**
         * The URI of the Git repository that's used as the Config Server back end should be started with `http://`, `https://`, `git@`, or `ssh://`.
         */
        uri: pulumi.Input<string>;
    }
    interface SpringCloudServiceConfigServerGitSettingRepositoryHttpBasicAuth {
        /**
         * The password used to access the Git repository server, required when the Git repository server supports HTTP Basic Authentication.
         */
        password: pulumi.Input<string>;
        /**
         * The username that's used to access the Git repository server, required when the Git repository server supports HTTP Basic Authentication.
         */
        username: pulumi.Input<string>;
    }
    interface SpringCloudServiceConfigServerGitSettingRepositorySshAuth {
        /**
         * The host key of the Git repository server, should not include the algorithm prefix as covered by `host-key-algorithm`.
         */
        hostKey?: pulumi.Input<string>;
        /**
         * The host key algorithm, should be `ssh-dss`, `ssh-rsa`, `ecdsa-sha2-nistp256`, `ecdsa-sha2-nistp384`, or `ecdsa-sha2-nistp521`. Required only if `host-key` exists.
         */
        hostKeyAlgorithm?: pulumi.Input<string>;
        /**
         * The SSH private key to access the Git repository, required when the URI starts with `git@` or `ssh://`.
         */
        privateKey: pulumi.Input<string>;
        /**
         * Indicates whether the Config Server instance will fail to start if the hostKey does not match. Defaults to `true`.
         */
        strictHostKeyCheckingEnabled?: pulumi.Input<boolean>;
    }
    interface SpringCloudServiceConfigServerGitSettingSshAuth {
        /**
         * The host key of the Git repository server, should not include the algorithm prefix as covered by `host-key-algorithm`.
         */
        hostKey?: pulumi.Input<string>;
        /**
         * The host key algorithm, should be `ssh-dss`, `ssh-rsa`, `ecdsa-sha2-nistp256`, `ecdsa-sha2-nistp384`, or `ecdsa-sha2-nistp521`. Required only if `host-key` exists.
         */
        hostKeyAlgorithm?: pulumi.Input<string>;
        /**
         * The SSH private key to access the Git repository, required when the URI starts with `git@` or `ssh://`.
         */
        privateKey: pulumi.Input<string>;
        /**
         * Indicates whether the Config Server instance will fail to start if the hostKey does not match. Defaults to `true`.
         */
        strictHostKeyCheckingEnabled?: pulumi.Input<boolean>;
    }
    interface SpringCloudServiceContainerRegistry {
        /**
         * Specifies the name of the container registry.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the password of the container registry.
         */
        password: pulumi.Input<string>;
        /**
         * Specifies the login server of the container registry.
         */
        server: pulumi.Input<string>;
        /**
         * Specifies the username of the container registry.
         */
        username: pulumi.Input<string>;
    }
    interface SpringCloudServiceDefaultBuildService {
        /**
         * Specifies the name of the container registry used in the default build service.
         */
        containerRegistryName?: pulumi.Input<string>;
    }
    interface SpringCloudServiceMarketplace {
        /**
         * Specifies the plan ID of the 3rd Party Artifact that is being procured.
         */
        plan: pulumi.Input<string>;
        /**
         * Specifies the 3rd Party artifact that is being procured.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher ID of the 3rd Party Artifact that is being procured.
         */
        publisher: pulumi.Input<string>;
    }
    interface SpringCloudServiceNetwork {
        /**
         * Specifies the Name of the resource group containing network resources of Azure Spring Cloud Apps. Changing this forces a new resource to be created.
         */
        appNetworkResourceGroup?: pulumi.Input<string>;
        /**
         * Specifies the ID of the Subnet which should host the Spring Boot Applications deployed in this Spring Cloud Service. Changing this forces a new resource to be created.
         */
        appSubnetId: pulumi.Input<string>;
        /**
         * A list of (at least 3) CIDR ranges (at least /16) which are used to host the Spring Cloud infrastructure, which must not overlap with any existing CIDR ranges in the Subnet. Changing this forces a new resource to be created.
         */
        cidrRanges: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the egress traffic type of the Spring Cloud Service. Possible values are `loadBalancer` and `userDefinedRouting`. Defaults to `loadBalancer`. Changing this forces a new resource to be created.
         */
        outboundType?: pulumi.Input<string>;
        /**
         * Ingress read time out in seconds.
         */
        readTimeoutSeconds?: pulumi.Input<number>;
        /**
         * Specifies the Name of the resource group containing network resources of Azure Spring Cloud Service Runtime. Changing this forces a new resource to be created.
         */
        serviceRuntimeNetworkResourceGroup?: pulumi.Input<string>;
        /**
         * Specifies the ID of the Subnet where the Service Runtime components of the Spring Cloud Service will exist. Changing this forces a new resource to be created.
         */
        serviceRuntimeSubnetId: pulumi.Input<string>;
    }
    interface SpringCloudServiceRequiredNetworkTrafficRule {
        /**
         * The direction of required traffic. Possible values are `Inbound`, `Outbound`.
         */
        direction?: pulumi.Input<string>;
        /**
         * The FQDN list of required traffic.
         */
        fqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The IP list of required traffic.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The port of required traffic.
         */
        port?: pulumi.Input<number>;
        /**
         * The protocol of required traffic.
         */
        protocol?: pulumi.Input<string>;
    }
    interface SpringCloudServiceTrace {
        /**
         * The connection string used for Application Insights.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The sampling rate of Application Insights Agent. Must be between `0.0` and `100.0`. Defaults to `10.0`.
         */
        sampleRate?: pulumi.Input<number>;
    }
}
export declare namespace appservice {
    interface AppConnectionAuthentication {
        /**
         * Service principal certificate for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalCertificate`.
         */
        certificate?: pulumi.Input<string>;
        /**
         * Client ID for `userAssignedIdentity` or `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`. When `type` is set to `userAssignedIdentity`, `clientId` and `subscriptionId` should be either both specified or both not specified.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Username or account name for secret auth. `name` and `secret` should be either both specified or both not specified when `type` is set to `secret`.
         */
        name?: pulumi.Input<string>;
        /**
         * Principal ID for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`.
         */
        principalId?: pulumi.Input<string>;
        /**
         * Password or account key for secret auth. `secret` and `name` should be either both specified or both not specified when `type` is set to `secret`.
         */
        secret?: pulumi.Input<string>;
        /**
         * Subscription ID for `userAssignedIdentity`. `subscriptionId` and `clientId` should be either both specified or both not specified.
         */
        subscriptionId?: pulumi.Input<string>;
        /**
         * The authentication type. Possible values are `systemAssignedIdentity`, `userAssignedIdentity`, `servicePrincipalSecret`, `servicePrincipalCertificate`, `secret`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface AppConnectionSecretStore {
        /**
         * The key vault id to store secret.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAlwaysReady {
        /**
         * The instance count of the `alwaysReady` of the Function App. The minimum number is `0`. The total number of `instanceCount` should not exceed the `maximumInstanceCount`.
         */
        instanceCount?: pulumi.Input<number>;
        /**
         * The name of the `alwaysReady` of the Function App.
         */
        name: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Linux Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Linux Web App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens for this Linux Web App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, `wl.basic` is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.AppFlexConsumptionAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface AppFlexConsumptionAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login..
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface AppFlexConsumptionAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface AppFlexConsumptionConnectionString {
        /**
         * The name which should be used for this Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `MySQL`, `SQLServer`, `SQLAzure`, `Custom`, `NotificationHub`, `ServiceBus`, `EventHub`, `APIHub`, `DocDb`, `RedisCache`, and `PostgreSQL`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface AppFlexConsumptionIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Function App. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface AppFlexConsumptionSiteConfig {
        /**
         * The URL of the API definition that describes this Linux Function App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The ID of the API Management API for this Linux Function App.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * An `appServiceLogs` block as defined above.
         */
        appServiceLogs?: pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigAppServiceLogs>;
        /**
         * The Connection String for linking the Linux Function App to Application Insights.
         */
        applicationInsightsConnectionString?: pulumi.Input<string>;
        /**
         * The Instrumentation Key for connecting the Linux Function App to Application Insights.
         */
        applicationInsightsKey?: pulumi.Input<string>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Linux Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is detailed error logging enabled
         */
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigIpRestriction>[]>;
        /**
         * The Site load balancing mode. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Possible values include `VS2017`, `VS2019`, and `VS2022`.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * Should Scale Monitoring of the Functions Runtime be enabled?
         *
         * > **Note:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigScmIpRestriction>[]>;
        /**
         * The minimum version of TLS required for SSL requests to the SCM site. Possible values include `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        /**
         * The SCM Type in use by the Linux Function App.
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Linux Function App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Linux Web App Linux Function App use a 32-bit worker. Defaults to `false`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should the Linux Function App route all traffic through the virtual network. Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The number of Workers for this Linux Function App.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface AppFlexConsumptionSiteConfigAppServiceLogs {
        /**
         * The amount of disk space to use for logs. Valid values are between `25` and `100`. Defaults to `35`.
         */
        diskQuotaMb?: pulumi.Input<number>;
        /**
         * The retention period for logs in days. Valid values are between `0` and `99999`.(never delete).
         *
         * > **Note:** This block is not supported on Consumption plans.
         */
        retentionPeriodDays?: pulumi.Input<number>;
    }
    interface AppFlexConsumptionSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials allowed in CORS requests? Defaults to `false`.
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface AppFlexConsumptionSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.AppFlexConsumptionSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppFlexConsumptionSiteCredential {
        /**
         * The name which should be used for this Function App. Changing this forces a new Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions)
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface AppFlexConsumptionStickySettings {
        /**
         * A list of `appSetting` names that the Linux Function App will not swap between Slots when a swap operation is triggered.
         */
        appSettingNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `connectionString` names that the Linux Function App will not swap between Slots when a swap operation is triggered.
         */
        connectionStringNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceAuthSettings {
        /**
         * A `activeDirectory` block as defined below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.AppServiceAuthSettingsActiveDirectory>;
        /**
         * Login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form "key=value".
         */
        additionalLoginParams?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default provider to use when multiple providers have been set up. Possible values are `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount` and `Twitter`.
         *
         * > **NOTE:** When using multiple providers, the default provider must be set for settings like `unauthenticatedClientAction` to work.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Is Authentication enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.AppServiceAuthSettingsFacebook>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.AppServiceAuthSettingsGoogle>;
        /**
         * Issuer URI. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.AppServiceAuthSettingsMicrosoft>;
        /**
         * The runtime version of the Authentication/Authorization module.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72`.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * If enabled the module will durably store platform-specific security tokens that are obtained during login flows. Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.AppServiceAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values are `AllowAnonymous` and `RedirectToLoginPage`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface AppServiceAuthSettingsActiveDirectory {
        /**
         * Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Client ID of this relying party application. Enables OpenIDConnection authentication with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of this relying party application. If no secret is provided, implicit flow will be used.
         */
        clientSecret?: pulumi.Input<string>;
    }
    interface AppServiceAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login.
         */
        appSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Facebook login authentication. <https://developers.facebook.com/docs/facebook-login>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. <https://developers.google.com/identity/sign-in/web/>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. <https://msdn.microsoft.com/en-us/library/dn631845.aspx>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceAuthSettingsTwitter {
        /**
         * The consumer key of the Twitter app used for login
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The consumer secret of the Twitter app used for login.
         */
        consumerSecret: pulumi.Input<string>;
    }
    interface AppServiceBackup {
        /**
         * Is this Backup enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Specifies the name for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.AppServiceBackupSchedule>;
        /**
         * The SAS URL to a Storage Container where Backups should be saved.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface AppServiceBackupSchedule {
        /**
         * Sets how often the backup should be executed.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * Sets the unit of time for how often the backup should be executed. Possible values are `Day` or `Hour`.
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should at least one backup always be kept in the Storage Account by the Retention Policy, regardless of how old it is?
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * Specifies the number of days after which Backups should be deleted. Defaults to `30`.
         */
        retentionPeriodInDays?: pulumi.Input<number>;
        /**
         * Sets when the schedule should start working.
         */
        startTime?: pulumi.Input<string>;
    }
    interface AppServiceConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the Connection String. Possible values are `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure` and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The value for the Connection String.
         */
        value: pulumi.Input<string>;
    }
    interface AppServiceIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the App Service. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you), `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field, and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities.
         *
         * > **NOTE:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the App Service has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface AppServiceLogs {
        /**
         * An `applicationLogs` block as defined below.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.AppServiceLogsApplicationLogs>;
        /**
         * Should `Detailed error messages` be enabled on this App Service? Defaults to `false`.
         */
        detailedErrorMessagesEnabled?: pulumi.Input<boolean>;
        /**
         * Should `Failed request tracing` be enabled on this App Service? Defaults to `false`.
         */
        failedRequestTracingEnabled?: pulumi.Input<boolean>;
        /**
         * An `httpLogs` block as defined below.
         */
        httpLogs?: pulumi.Input<inputs.appservice.AppServiceLogsHttpLogs>;
    }
    interface AppServiceLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.AppServiceLogsApplicationLogsAzureBlobStorage>;
        /**
         * Log level for filesystem based logging. Supported values are `Error`, `Information`, `Verbose`, `Warning` and `Off`. Defaults to `Off`.
         */
        fileSystemLevel?: pulumi.Input<string>;
    }
    interface AppServiceLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The URL to the storage container with a shared access signature token appended.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface AppServiceLogsHttpLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.AppServiceLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined below.
         */
        fileSystem?: pulumi.Input<inputs.appservice.AppServiceLogsHttpLogsFileSystem>;
    }
    interface AppServiceLogsHttpLogsAzureBlobStorage {
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The URL to the storage container with a shared access signature token appended.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface AppServiceLogsHttpLogsFileSystem {
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that HTTP log files can use before being removed.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface AppServiceSiteConfig {
        /**
         * Are Managed Identity Credentials used for Azure Container Registry pull
         */
        acrUseManagedIdentityCredentials?: pulumi.Input<boolean>;
        /**
         * If using User Managed Identity, the User Managed Identity Client Id
         *
         * > **NOTE:** When using User Managed Identity with Azure Container Registry the Identity will need to have the [ACRPull role assigned](https://docs.microsoft.com/azure/container-registry/container-registry-authentication-managed-identity#example-1-access-with-a-user-assigned-identity)
         */
        acrUserManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should the app be loaded at all times? Defaults to `false`.
         *
         * > **NOTE:** when using an App Service Plan in the `Free` or `Shared` Tiers `alwaysOn` must be set to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * App command line to launch, e.g. `/sbin/myserver -b 0.0.0.0`.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The name of the slot to automatically swap to during deployment
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.appservice.AppServiceSiteConfigCors>;
        /**
         * The ordering of default documents to load, if an address isn't specified.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The version of the .NET framework's CLR used in this App Service. Possible values are `v2.0` (which will use the latest version of the .NET framework for the .NET CLR v2 - currently `.net 3.5`), `v4.0` (which corresponds to the latest version of the .NET CLR v4 - which at the time of writing is `.net 4.7.1`), `v5.0` and `v6.0`. [For more information on which .NET CLR version to use based on the .NET framework you're targeting - please see this table](https://en.wikipedia.org/wiki/.NET_Framework_version_history#Overview). Defaults to `v4.0`.
         */
        dotnetFrameworkVersion?: pulumi.Input<string>;
        /**
         * State of FTP / FTPS service for this App Service. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The health check path to be pinged by App Service. [For more information - please see App Service health check announcement](https://azure.github.io/AppService/2020/08/24/healthcheck-on-app-service.html).
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Is HTTP2 Enabled on this App Service? Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * A list of objects representing ip restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `ipRestriction` to empty slice (`[]`) to remove it.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.AppServiceSiteConfigIpRestriction>[]>;
        /**
         * The Java Container to use. If specified `javaVersion` and `javaContainerVersion` must also be specified. Possible values are `JAVA`, `JETTY`, and `TOMCAT`.
         */
        javaContainer?: pulumi.Input<string>;
        /**
         * The version of the Java Container to use. If specified `javaVersion` and `javaContainer` must also be specified.
         */
        javaContainerVersion?: pulumi.Input<string>;
        /**
         * The version of Java to use. If specified `javaContainer` and `javaContainerVersion` must also be specified. Possible values are `1.7`, `1.8` and `11` and their specific versions - except for Java 11 (e.g. `1.7.0_80`, `1.8.0_181`, `11`)
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * Linux App Framework and version for the App Service. Possible options are a Docker container (`DOCKER|<user/image:tag>`), a base-64 encoded Docker Compose file (`COMPOSE|${filebase64("compose.yml")}`) or a base-64 encoded Kubernetes Manifest (`KUBE|${filebase64("kubernetes.yml")}`).
         *
         * > **NOTE:** To set this property the App Service Plan to which the App belongs must be configured with `kind = "Linux"`, and `reserved = true` or the API will reject any value supplied.
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * Is "MySQL In App" Enabled? This runs a local MySQL instance with your app and shares resources from the App Service plan.
         *
         * > **NOTE:** MySQL In App is not intended for production environments and will not scale beyond a single instance. Instead you may wish to use Azure Database for MySQL.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * The Managed Pipeline Mode. Possible values are `Integrated` and `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The minimum supported TLS version for the app service. Possible values are `1.0`, `1.1`, and `1.2`. Defaults to `1.2` for new app services.
         */
        minTlsVersion?: pulumi.Input<string>;
        /**
         * The scaled number of workers (for per site scaling) of this App Service. Requires that `perSiteScaling` is enabled on the `azure.appservice.Plan`. [For more information - please see Microsoft documentation on high-density hosting](https://docs.microsoft.com/azure/app-service/manage-scale-per-app).
         */
        numberOfWorkers?: pulumi.Input<number>;
        /**
         * The version of PHP to use in this App Service. Possible values are `5.5`, `5.6`, `7.0`, `7.1`, `7.2`, `7.3` and `7.4`.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * The version of Python to use in this App Service. Possible values are `2.7` and `3.4`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * Is Remote Debugging Enabled? Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * Which version of Visual Studio should the Remote Debugger be compatible with? Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * A list of `scmIpRestriction` objects representing IP restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `scmIpRestriction` to empty slice (`[]`) to remove it.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.AppServiceSiteConfigScmIpRestriction>[]>;
        /**
         * The type of Source Control enabled for this App Service. Defaults to `None`. Possible values are: `BitbucketGit`, `BitbucketHg`, `CodePlexGit`, `CodePlexHg`, `Dropbox`, `ExternalGit`, `ExternalHg`, `GitHub`, `LocalGit`, `None`, `OneDrive`, `Tfs`, `VSO`, and `VSTSRM`
         */
        scmType?: pulumi.Input<string>;
        /**
         * IP security restrictions for scm to use main. Defaults to `false`.
         *
         * > **NOTE** Any `scmIpRestriction` blocks configured are ignored by the service when `scmUseMainIpRestriction` is set to `true`. Any scm restrictions will become active if this is subsequently set to `false` or removed.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the App Service run in 32 bit mode, rather than 64 bit mode?
         *
         * > **NOTE:** when using an App Service Plan in the `Free` or `Shared` Tiers `use32BitWorkerProcess` must be set to `true`.
         */
        use32BitWorkerProcess?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have Virtual Network Security Groups and User Defined Routes applied? Defaults to `false`.
         *
         * > **NOTE:** This setting supersedes the previous mechanism of setting the `appSettings` value of `WEBSITE_VNET_ROUTE_ALL`. However, to prevent older configurations breaking Terraform will update this value if it not explicitly set to the value in `app_settings.WEBSITE_VNET_ROUTE_ALL`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should WebSockets be enabled?
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The Windows Docker container image (`DOCKER|<user/image:tag>`)
         */
        windowsFxVersion?: pulumi.Input<string>;
    }
    interface AppServiceSiteConfigCors {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials supported?
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface AppServiceSiteConfigIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `ipRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.AppServiceSiteConfigIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface AppServiceSiteConfigIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceSiteConfigScmIpRestriction {
        /**
         * Allow or Deny access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `scmIpRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.AppServiceSiteConfigScmIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface AppServiceSiteConfigScmIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AppServiceSiteCredential {
        /**
         * The password associated with the username, which can be used to publish to this App Service.
         */
        password?: pulumi.Input<string>;
        /**
         * The username which can be used to publish to this App Service
         */
        username?: pulumi.Input<string>;
    }
    interface AppServiceSourceControl {
        /**
         * The branch of the remote repository to use. Defaults to 'master'.
         */
        branch?: pulumi.Input<string>;
        /**
         * Limits to manual integration. Defaults to `false` if not specified.
         */
        manualIntegration?: pulumi.Input<boolean>;
        /**
         * The URL of the source code repository.
         */
        repoUrl?: pulumi.Input<string>;
        /**
         * Enable roll-back for the repository. Defaults to `false` if not specified.
         */
        rollbackEnabled?: pulumi.Input<boolean>;
        /**
         * Use Mercurial if `true`, otherwise uses Git.
         */
        useMercurial?: pulumi.Input<boolean>;
    }
    interface AppServiceStorageAccount {
        /**
         * The access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The name of the storage account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path to mount the storage within the site's runtime environment.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name of the storage account identifier.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the file share (container name, for Blob storage).
         */
        shareName: pulumi.Input<string>;
        /**
         * The type of storage. Possible values are `AzureBlob` and `AzureFiles`.
         */
        type: pulumi.Input<string>;
    }
    interface CertificateOrderCertificate {
        /**
         * The name of the App Service Certificate.
         */
        certificateName?: pulumi.Input<string>;
        /**
         * Key Vault resource Id.
         */
        keyVaultId?: pulumi.Input<string>;
        /**
         * Key Vault secret name.
         */
        keyVaultSecretName?: pulumi.Input<string>;
        /**
         * Status of the Key Vault secret.
         */
        provisioningState?: pulumi.Input<string>;
    }
    interface ConnectionAuthentication {
        /**
         * Service principal certificate for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalCertificate`.
         */
        certificate?: pulumi.Input<string>;
        /**
         * Client ID for `userAssignedIdentity` or `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`. When `type` is set to `userAssignedIdentity`, `clientId` and `subscriptionId` should be either both specified or both not specified.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Username or account name for secret auth. `name` and `secret` should be either both specified or both not specified when `type` is set to `secret`.
         */
        name?: pulumi.Input<string>;
        /**
         * Principal ID for `servicePrincipal` auth. Should be specified when `type` is set to `servicePrincipalSecret` or `servicePrincipalCertificate`.
         */
        principalId?: pulumi.Input<string>;
        /**
         * Password or account key for secret auth. `secret` and `name` should be either both specified or both not specified when `type` is set to `secret`.
         */
        secret?: pulumi.Input<string>;
        /**
         * Subscription ID for `userAssignedIdentity`. `subscriptionId` and `clientId` should be either both specified or both not specified.
         */
        subscriptionId?: pulumi.Input<string>;
        /**
         * The authentication type. Possible values are `systemAssignedIdentity`, `userAssignedIdentity`, `servicePrincipalSecret`, `servicePrincipalCertificate`, `secret`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface ConnectionSecretStore {
        /**
         * The key vault id to store secret.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface EnvironmentV3ClusterSetting {
        /**
         * The name of the Cluster Setting.
         */
        name: pulumi.Input<string>;
        /**
         * The value for the Cluster Setting.
         */
        value: pulumi.Input<string>;
    }
    interface EnvironmentV3InboundNetworkDependency {
        /**
         * A short description of the purpose of the network traffic.
         */
        description?: pulumi.Input<string>;
        /**
         * A list of IP addresses that network traffic will originate from in CIDR notation.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ports that network traffic will arrive to the App Service Environment V3 on.
         */
        ports?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppAuthSettings {
        /**
         * A `activeDirectory` block as defined below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.FunctionAppAuthSettingsActiveDirectory>;
        /**
         * Login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form "key=value".
         */
        additionalLoginParams?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default provider to use when multiple providers have been set up. Possible values are `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount` and `Twitter`.
         *
         * > **NOTE:** When using multiple providers, the default provider must be set for settings like `unauthenticatedClientAction` to work.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Is Authentication enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.FunctionAppAuthSettingsFacebook>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.FunctionAppAuthSettingsGoogle>;
        /**
         * Issuer URI. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.FunctionAppAuthSettingsMicrosoft>;
        /**
         * The runtime version of the Authentication/Authorization module.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72`.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * If enabled the module will durably store platform-specific security tokens that are obtained during login flows. Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.FunctionAppAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values are `AllowAnonymous` and `RedirectToLoginPage`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface FunctionAppAuthSettingsActiveDirectory {
        /**
         * Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Client ID of this relying party application. Enables OpenIDConnection authentication with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of this relying party application. If no secret is provided, implicit flow will be used.
         */
        clientSecret?: pulumi.Input<string>;
    }
    interface FunctionAppAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login.
         */
        appSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Facebook login authentication. <https://developers.facebook.com/docs/facebook-login>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. <https://developers.google.com/identity/sign-in/web/>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. <https://msdn.microsoft.com/en-us/library/dn631845.aspx>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         */
        consumerSecret: pulumi.Input<string>;
    }
    interface FunctionAppConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the Connection String. Possible values are `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure` and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The value for the Connection String.
         */
        value: pulumi.Input<string>;
    }
    interface FunctionAppFunctionFile {
        /**
         * The content of the file. Changing this forces a new resource to be created.
         */
        content: pulumi.Input<string>;
        /**
         * The filename of the file to be uploaded. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface FunctionAppIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Function App. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you), `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field, and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities.
         *
         * > **NOTE:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Function App has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface FunctionAppSiteConfig {
        /**
         * Should the Function App be loaded at all times? Defaults to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * The name of the slot to automatically swap to during deployment
         *
         * > **NOTE:** This attribute is only used for slots.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.appservice.FunctionAppSiteConfigCors>;
        /**
         * The version of the .NET framework's CLR used in this function app. Possible values are `v4.0` (including .NET Core 2.1 and 3.1), `v5.0` and `v6.0`. [For more information on which .NET Framework version to use based on the runtime version you're targeting - please see this table](https://docs.microsoft.com/azure/azure-functions/functions-dotnet-class-library#supported-versions). Defaults to `v4.0`.
         */
        dotnetFrameworkVersion?: pulumi.Input<string>;
        /**
         * The number of minimum instances for this function app. Only affects apps on the Premium plan. Possible values are between `1` and `20`.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this function app. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `AllAllowed`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * Path which will be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies whether or not the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * A list of `ipRestriction` objects representing IP restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `ipRestriction` to empty slice (`[]`) to remove it.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.FunctionAppSiteConfigIpRestriction>[]>;
        /**
         * Java version hosted by the function app in Azure. Possible values are `1.8`, `11` & `17` (In-Preview).
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * Linux App Framework and version for the AppService, e.g. `DOCKER|(golang:latest)`.
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The minimum supported TLS version for the function app. Possible values are `1.0`, `1.1`, and `1.2`. Defaults to `1.2` for new function apps.
         */
        minTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this function app. Only affects apps on the Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Runtime Scale Monitoring be enabled?. Only applicable to apps on the Premium plan. Defaults to `false`.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * A list of `scmIpRestriction` objects representing IP restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `scmIpRestriction` to empty slice (`[]`) to remove it.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.FunctionAppSiteConfigScmIpRestriction>[]>;
        /**
         * The type of Source Control used by the Function App. Valid values include: `BitBucketGit`, `BitBucketHg`, `CodePlexGit`, `CodePlexHg`, `Dropbox`, `ExternalGit`, `ExternalHg`, `GitHub`, `LocalGit`, `None` (default), `OneDrive`, `Tfs`, `VSO`, and `VSTSRM`.
         *
         * > **NOTE:** This setting is incompatible with the `sourceControl` block which updates this value based on the setting provided.
         */
        scmType?: pulumi.Input<string>;
        /**
         * IP security restrictions for scm to use main. Defaults to `false`.
         *
         * > **NOTE** Any `scmIpRestriction` blocks configured are ignored by the service when `scmUseMainIpRestriction` is set to `true`. Any scm restrictions will become active if this is subsequently set to `false` or removed.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Function App run in 32 bit mode, rather than 64 bit mode? Defaults to `true`.
         *
         * > **Note:** when using an App Service Plan in the `Free` or `Shared` Tiers `use32BitWorkerProcess` must be set to `true`.
         */
        use32BitWorkerProcess?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have Virtual Network Security Groups and User Defined Routes applied? Defaults to `false`.
         *
         * > **NOTE:** This setting supersedes the previous mechanism of setting the `appSettings` value of `WEBSITE_VNET_ROUTE_ALL`. However, to prevent older configurations breaking Terraform will update this value if it not explicitly set to the value in `app_settings.WEBSITE_VNET_ROUTE_ALL`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should WebSockets be enabled?
         */
        websocketsEnabled?: pulumi.Input<boolean>;
    }
    interface FunctionAppSiteConfigCors {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials supported?
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface FunctionAppSiteConfigIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `ipRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.FunctionAppSiteConfigIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, the priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface FunctionAppSiteConfigIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSiteConfigScmIpRestriction {
        /**
         * Allow or Deny access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `scmIpRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.FunctionAppSiteConfigScmIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface FunctionAppSiteConfigScmIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSiteCredential {
        /**
         * The password associated with the username, which can be used to publish to this App Service.
         */
        password?: pulumi.Input<string>;
        /**
         * The username which can be used to publish to this App Service
         */
        username?: pulumi.Input<string>;
    }
    interface FunctionAppSlotAuthSettings {
        /**
         * An `activeDirectory` block as defined below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.FunctionAppSlotAuthSettingsActiveDirectory>;
        /**
         * login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form "key=value".
         */
        additionalLoginParams?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default provider to use when multiple providers have been set up. Possible values are `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount` and `Twitter`.
         *
         * > **NOTE:** When using multiple providers, the default provider must be set for settings like `unauthenticatedClientAction` to work.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Is Authentication enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.FunctionAppSlotAuthSettingsFacebook>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.FunctionAppSlotAuthSettingsGoogle>;
        /**
         * Issuer URI. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.FunctionAppSlotAuthSettingsMicrosoft>;
        /**
         * The runtime version of the Authentication/Authorization module.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72`.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * If enabled the module will durably store platform-specific security tokens that are obtained during login flows. Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.FunctionAppSlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values are `AllowAnonymous` and `RedirectToLoginPage`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface FunctionAppSlotAuthSettingsActiveDirectory {
        /**
         * Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Client ID of this relying party application. Enables OpenIDConnection authentication with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of this relying party application. If no secret is provided, implicit flow will be used.
         */
        clientSecret?: pulumi.Input<string>;
    }
    interface FunctionAppSlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login.
         */
        appSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Facebook login authentication. <https://developers.facebook.com/docs/facebook-login>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. <https://developers.google.com/identity/sign-in/web/>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. <https://msdn.microsoft.com/en-us/library/dn631845.aspx>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSlotAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         */
        consumerSecret: pulumi.Input<string>;
    }
    interface FunctionAppSlotConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the Connection String. Possible values are `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure` and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The value for the Connection String.
         */
        value: pulumi.Input<string>;
    }
    interface FunctionAppSlotIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Function App. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you), `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field, and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities.
         *
         * > **NOTE:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Function App has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface FunctionAppSlotSiteConfig {
        /**
         * Should the Function App be loaded at all times? Defaults to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * The name of the slot to automatically swap to during deployment
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.appservice.FunctionAppSlotSiteConfigCors>;
        /**
         * The version of the .NET framework's CLR used in this function app. Possible values are `v4.0` (including .NET Core 2.1 and 3.1), `v5.0` and `v6.0`. [For more information on which .NET Framework version to use based on the runtime version you're targeting - please see this table](https://docs.microsoft.com/azure/azure-functions/functions-dotnet-class-library#supported-versions). Defaults to `v4.0`.
         */
        dotnetFrameworkVersion?: pulumi.Input<string>;
        /**
         * The number of minimum instances for this function app. Only applicable to apps on the Premium plan.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this function app. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * Path which will be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies whether or not the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * A list of `ipRestriction` objects representing IP restrictions as defined below.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.FunctionAppSlotSiteConfigIpRestriction>[]>;
        /**
         * Java version hosted by the function app in Azure. Possible values are `1.8`, `11` & `17` (In-Preview).
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * Linux App Framework and version for the AppService, e.g. `DOCKER|(golang:latest)`.
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The minimum supported TLS version for the function app. Possible values are `1.0`, `1.1`, and `1.2`. Defaults to `1.2` for new function apps.
         */
        minTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this function app. Only affects apps on the Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Runtime Scale Monitoring be enabled?. Only applicable to apps on the Premium plan. Defaults to `false`.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * A list of `scmIpRestriction` objects representing IP restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `scmIpRestriction` to empty slice (`[]`) to remove it.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.FunctionAppSlotSiteConfigScmIpRestriction>[]>;
        /**
         * The type of Source Control used by this function App. Valid values include: `BitBucketGit`, `BitBucketHg`, `CodePlexGit`, `CodePlexHg`, `Dropbox`, `ExternalGit`, `ExternalHg`, `GitHub`, `LocalGit`, `None` (default), `OneDrive`, `Tfs`, `VSO`, and `VSTSRM`.
         *
         * > **NOTE:** This setting is incompatible with the `sourceControl` block which updates this value based on the setting provided.
         */
        scmType?: pulumi.Input<string>;
        /**
         * IP security restrictions for scm to use main. Defaults to `false`.
         *
         * > **NOTE** Any `scmIpRestriction` blocks configured are ignored by the service when `scmUseMainIpRestriction` is set to `true`. Any scm restrictions will become active if this is subsequently set to `false` or removed.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Function App run in 32 bit mode, rather than 64 bit mode? Defaults to `true`.
         *
         * > **Note:** when using an App Service Plan in the `Free` or `Shared` Tiers `use32BitWorkerProcess` must be set to `true`.
         */
        use32BitWorkerProcess?: pulumi.Input<boolean>;
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should WebSockets be enabled?
         */
        websocketsEnabled?: pulumi.Input<boolean>;
    }
    interface FunctionAppSlotSiteConfigCors {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials supported?
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface FunctionAppSlotSiteConfigIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `ipRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.FunctionAppSlotSiteConfigIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface FunctionAppSlotSiteConfigIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSlotSiteConfigScmIpRestriction {
        /**
         * Allow or Deny access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `scmIpRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.FunctionAppSlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface FunctionAppSlotSiteConfigScmIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FunctionAppSlotSiteCredential {
        /**
         * The password associated with the username, which can be used to publish to this App Service.
         */
        password?: pulumi.Input<string>;
        /**
         * The username which can be used to publish to this App Service
         */
        username?: pulumi.Input<string>;
    }
    interface FunctionAppSourceControl {
        /**
         * The branch of the remote repository to use. Defaults to 'master'.
         */
        branch?: pulumi.Input<string>;
        /**
         * Limits to manual integration. Defaults to `false` if not specified.
         */
        manualIntegration?: pulumi.Input<boolean>;
        /**
         * The URL of the source code repository.
         */
        repoUrl?: pulumi.Input<string>;
        /**
         * Enable roll-back for the repository. Defaults to `false` if not specified.
         */
        rollbackEnabled?: pulumi.Input<boolean>;
        /**
         * Use Mercurial if `true`, otherwise uses Git.
         */
        useMercurial?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Linux Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Linux Web App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens for this Linux Web App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, `wl.basic` is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login..
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface LinuxFunctionAppBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.LinuxFunctionAppBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface LinuxFunctionAppBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day` and `Hour`.
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppConnectionString {
        /**
         * The name which should be used for this Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `MySQL`, `SQLServer`, `SQLAzure`, `Custom`, `NotificationHub`, `ServiceBus`, `EventHub`, `APIHub`, `DocDb`, `RedisCache`, and `PostgreSQL`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface LinuxFunctionAppIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Function App. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSiteConfig {
        /**
         * If this Linux Web App is Always On enabled. Defaults to `false`.
         *
         * > **Note:** when running in a Consumption or Premium Plan, `alwaysOn` feature should be turned off. Please turn it off before upgrading the service plan from standard to premium.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL of the API definition that describes this Linux Function App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The ID of the API Management API for this Linux Function App.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * An `appServiceLogs` block as defined above.
         */
        appServiceLogs?: pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigAppServiceLogs>;
        /**
         * The Connection String for linking the Linux Function App to Application Insights.
         */
        applicationInsightsConnectionString?: pulumi.Input<string>;
        /**
         * The Instrumentation Key for connecting the Linux Function App to Application Insights.
         */
        applicationInsightsKey?: pulumi.Input<string>;
        /**
         * An `applicationStack` block as defined above.
         *
         * > **Note:** If this is set, there must not be an application setting `FUNCTIONS_WORKER_RUNTIME`.
         */
        applicationStack?: pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigApplicationStack>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Linux Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is detailed error logging enabled
         */
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this function app. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigIpRestriction>[]>;
        /**
         * The Linux FX Version
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The Site load balancing mode. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * Should Scale Monitoring of the Functions Runtime be enabled?
         *
         * > **Note:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigScmIpRestriction>[]>;
        /**
         * Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        /**
         * The SCM Type in use by the Linux Function App.
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Linux Function App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Linux Web App use a 32-bit worker process. Defaults to `false`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The number of Workers for this Linux Function App.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface LinuxFunctionAppSiteConfigAppServiceLogs {
        /**
         * The amount of disk space to use for logs. Valid values are between `25` and `100`. Defaults to `35`.
         */
        diskQuotaMb?: pulumi.Input<number>;
        /**
         * The retention period for logs in days. Valid values are between `0` and `99999`.(never delete).
         *
         * > **Note:** This block is not supported on Consumption plans.
         */
        retentionPeriodDays?: pulumi.Input<number>;
    }
    interface LinuxFunctionAppSiteConfigApplicationStack {
        /**
         * One or more `docker` blocks as defined below.
         */
        dockers?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigApplicationStackDocker>[]>;
        /**
         * The version of .NET to use. Possible values include `3.1`, `6.0`, `7.0`, `8.0`, `9.0` and `10.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The Version of Java to use. Supported versions include `8`, `11`, `17`, `21`, `25`.
         *
         * > **Note:** The value `21` is currently in Preview for `javaVersion`.
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to run. Possible values include `12`, `14`, `16`, `18`, `20`, `22` and `24`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
         */
        powershellCoreVersion?: pulumi.Input<string>;
        /**
         * The version of Python to run. Possible values are `3.14`, `3.13`, `3.12`, `3.11`, `3.10`, `3.9`, `3.8` and `3.7`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * Should the Linux Function App use a custom runtime?
         */
        useCustomRuntime?: pulumi.Input<boolean>;
        /**
         * Should the DotNet process use an isolated runtime. Defaults to `false`.
         */
        useDotnetIsolatedRuntime?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSiteConfigApplicationStackDocker {
        /**
         * The name of the Docker image to use.
         */
        imageName: pulumi.Input<string>;
        /**
         * The image tag of the image to use.
         */
        imageTag: pulumi.Input<string>;
        /**
         * The password for the account to use to connect to the registry.
         *
         * > **Note:** This value is required if `containerRegistryUseManagedIdentity` is not set to `true`.
         */
        registryPassword?: pulumi.Input<string>;
        /**
         * The URL of the docker registry.
         */
        registryUrl: pulumi.Input<string>;
        /**
         * The username to use for connections to the registry.
         *
         * > **Note:** This value is required if `containerRegistryUseManagedIdentity` is not set to `true`.
         */
        registryUsername?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials allowed in CORS requests? Defaults to `false`.
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxFunctionAppSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSiteCredential {
        /**
         * The name which should be used for this Linux Function App. Changing this forces a new Linux Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions)
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettings {
        /**
         * an `activeDirectory` block as detailed below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * a `facebook` block as detailed below.
         */
        facebook?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsFacebook>;
        /**
         * a `github` block as detailed below.
         */
        github?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsGithub>;
        /**
         * a `google` block as detailed below.
         */
        google?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * a `microsoft` block as detailed below.
         */
        microsoft?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * a `twitter` block as detailed below.
         */
        twitter?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, `wl.basic` is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * a `schedule` block as detailed below.
         */
        schedule: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Linux Function App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day` and `Hour`.
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotConnectionString {
        /**
         * The name which should be used for this Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Linux Function App Slot.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Function App Slot. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotSiteConfig {
        /**
         * If this Linux Web App is Always On enabled. Defaults to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL of the API definition that describes this Linux Function App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The ID of the API Management API for this Linux Function App.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The program and any arguments used to launch this app via the command line. (Example `node myapp.js`).
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * an `appServiceLogs` block as detailed below.
         */
        appServiceLogs?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigAppServiceLogs>;
        /**
         * The Connection String for linking the Linux Function App to Application Insights.
         */
        applicationInsightsConnectionString?: pulumi.Input<string>;
        /**
         * The Instrumentation Key for connecting the Linux Function App to Application Insights.
         */
        applicationInsightsKey?: pulumi.Input<string>;
        /**
         * an `applicationStack` block as detailed below.
         */
        applicationStack?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigApplicationStack>;
        /**
         * The name of the slot to automatically swap with when this slot is successfully deployed.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * a `cors` block as detailed below.
         */
        cors?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Linux Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is detailed error logging enabled
         */
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The number of minimum instances for this Linux Function App. Only affects apps on Elastic Premium plans.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this function app. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Defaults to `0`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * an `ipRestriction` block as detailed below.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigIpRestriction>[]>;
        /**
         * The Linux FX Version
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The Site load balancing mode. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * The Managed Pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * Should Functions Runtime Scale Monitoring be enabled.
         *
         * > **Note:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * a `scmIpRestriction` block as detailed below.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigScmIpRestriction>[]>;
        /**
         * Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        /**
         * The SCM Type in use by the Linux Function App.
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Linux Function App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Linux Web App use a 32-bit worker.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The number of Workers for this Linux Function App.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface LinuxFunctionAppSlotSiteConfigAppServiceLogs {
        /**
         * The amount of disk space to use for logs. Valid values are between `25` and `100`. Defaults to `35`.
         */
        diskQuotaMb?: pulumi.Input<number>;
        /**
         * The retention period for logs in days. Valid values are between `0` and `99999`.(never delete).
         *
         * > **Note:** This block is not supported on Consumption plans.
         */
        retentionPeriodDays?: pulumi.Input<number>;
    }
    interface LinuxFunctionAppSlotSiteConfigApplicationStack {
        /**
         * a `docker` block as detailed below.
         */
        dockers?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigApplicationStackDocker>[]>;
        /**
         * The version of .Net. Possible values are `3.1`, `6.0`, `7.0`, `8.0`, `9.0` and `10.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The version of Java to use. Possible values are `8`, `11`, `17` and `21`.
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to use. Possible values include `12`, `14`, `16`, `18`, `20`, `22` and `24`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PowerShell Core to use. Possibles values are `7` , `7.2`, and `7.4`.
         */
        powershellCoreVersion?: pulumi.Input<string>;
        /**
         * The version of Python to use. Possible values are `3.14`, `3.13`, `3.12`, `3.11`, `3.10`, `3.9`, `3.8` and `3.7`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * Should the Linux Function App use a custom runtime?
         */
        useCustomRuntime?: pulumi.Input<boolean>;
        /**
         * Should the DotNet process use an isolated runtime. Defaults to `false`.
         */
        useDotnetIsolatedRuntime?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSlotSiteConfigApplicationStackDocker {
        /**
         * The name of the Docker image to use.
         */
        imageName: pulumi.Input<string>;
        /**
         * The image tag of the image to use.
         */
        imageTag: pulumi.Input<string>;
        /**
         * The password for the account to use to connect to the registry.
         *
         * > **Note:** This value is required if `containerRegistryUseManagedIdentity` is not set to `true`.
         */
        registryPassword?: pulumi.Input<string>;
        /**
         * The URL of the docker registry.
         */
        registryUrl: pulumi.Input<string>;
        /**
         * The username to use for connections to the registry.
         *
         * > **Note:** This value is required if `containerRegistryUseManagedIdentity` is not set to `true`.
         */
        registryUsername?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials allowed in CORS requests? Defaults to `false`.
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface LinuxFunctionAppSlotSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * a `headers` block as detailed below.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * a `headers` block as detailed below.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppSlotSiteCredential {
        /**
         * The Site Credentials Username used for publishing.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface LinuxFunctionAppSlotStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`.
         */
        type: pulumi.Input<string>;
    }
    interface LinuxFunctionAppStickySettings {
        /**
         * A list of `appSetting` names that the Linux Function App will not swap between Slots when a swap operation is triggered.
         */
        appSettingNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `connectionString` names that the Linux Function App will not swap between Slots when a swap operation is triggered.
         */
        connectionStringNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxFunctionAppStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`.
         */
        type: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Linux Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `BuiltInAuthenticationProviderAzureActiveDirectory`, `BuiltInAuthenticationProviderFacebook`, `BuiltInAuthenticationProviderGoogle`, `BuiltInAuthenticationProviderMicrosoftAccount`, `BuiltInAuthenticationProviderTwitter`, `BuiltInAuthenticationProviderGithub`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Linux Web App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity that issues access tokens for this Linux Web App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, "wl.basic" is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.LinuxWebAppAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * Specifies the endpoint used for OpenID Connect Discovery. For example `https://example.com/.well-known/openid-configuration`.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface LinuxWebAppAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login..
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface LinuxWebAppBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.LinuxWebAppBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Linux Web App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day`, `Hour`
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of the age of backup? Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface LinuxWebAppConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `MySQL`, `SQLServer`, `SQLAzure`, `Custom`, `NotificationHub`, `ServiceBus`, `EventHub`, `APIHub`, `DocDb`, `RedisCache`, and `PostgreSQL`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface LinuxWebAppIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Linux Web App.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Web App. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxWebAppLogs {
        /**
         * A `applicationLogs` block as defined above.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.LinuxWebAppLogsApplicationLogs>;
        /**
         * Should detailed error messages be enabled?
         */
        detailedErrorMessages?: pulumi.Input<boolean>;
        /**
         * Should the failed request tracing be enabled?
         */
        failedRequestTracing?: pulumi.Input<boolean>;
        /**
         * An `httpLogs` block as defined above.
         */
        httpLogs?: pulumi.Input<inputs.appservice.LinuxWebAppLogsHttpLogs>;
    }
    interface LinuxWebAppLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.LinuxWebAppLogsApplicationLogsAzureBlobStorage>;
        /**
         * Log level. Possible values include: `Off`, `Verbose`, `Information`, `Warning`, and `Error`.
         */
        fileSystemLevel: pulumi.Input<string>;
    }
    interface LinuxWebAppLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppLogsHttpLogs {
        /**
         * A `azureBlobStorageHttp` block as defined above.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.LinuxWebAppLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined above.
         */
        fileSystem?: pulumi.Input<inputs.appservice.LinuxWebAppLogsHttpLogsFileSystem>;
    }
    interface LinuxWebAppLogsHttpLogsAzureBlobStorage {
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays?: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppLogsHttpLogsFileSystem {
        /**
         * The retention period in days. A value of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that log files can use.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface LinuxWebAppSiteConfig {
        /**
         * If this Linux Web App is Always On enabled. Defaults to `true`.
         *
         * > **Note:** `alwaysOn` must be explicitly set to `false` when using `Free`, `F1`, `D1`, or `Shared` Service Plans.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL to the API Definition for this Linux Web App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The API Management API ID this Linux Web App is associated with.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * A `applicationStack` block as defined above.
         */
        applicationStack?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigApplicationStack>;
        /**
         * A `autoHealSetting` block as defined above. Required with `autoHeal`.
         */
        autoHealSetting?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSetting>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Linux Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The State of FTP / FTPS service. Possible values include `AllAllowed`, `FtpsOnly`, and `Disabled`. Defaults to `Disabled`.
         *
         * > **Note:** Azure defaults this value to `AllAllowed`, however, in the interests of security Terraform will default this to `Disabled` to ensure the user makes a conscious choice to enable it.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to the Health Check.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Should the HTTP2 be enabled?
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigIpRestriction>[]>;
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The Site load balancing. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Use Local MySQL. Defaults to `false`.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * Managed pipeline mode. Possible values include `Integrated`, and `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * Should Remote Debugging be enabled? Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigScmIpRestriction>[]>;
        /**
         * The configures the minimum version of TLS required for SSL requests to the SCM site Possible values are `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        scmType?: pulumi.Input<string>;
        /**
         * Should the Linux Web App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Linux Web App use a 32-bit worker? Defaults to `true`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled? Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The number of Workers for this Linux App Service.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface LinuxWebAppSiteConfigApplicationStack {
        /**
         * The docker image, including tag, to be used. e.g. `appsvc/staticsite:latest`.
         */
        dockerImageName?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         *
         * > **Note:** `dockerRegistryUrl`, `dockerRegistryUsername`, and `dockerRegistryPassword` replace the use of the `appSettings` values of `DOCKER_REGISTRY_SERVER_URL`, `DOCKER_REGISTRY_SERVER_USERNAME` and `DOCKER_REGISTRY_SERVER_PASSWORD` respectively, these values will be managed by the provider and should not be specified in the `appSettings` map.
         */
        dockerRegistryPassword?: pulumi.Input<string>;
        /**
         * The URL of the container registry where the `dockerImageName` is located. e.g. `https://index.docker.io` or `https://mcr.microsoft.com`. This value is required with `dockerImageName`.
         */
        dockerRegistryUrl?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         */
        dockerRegistryUsername?: pulumi.Input<string>;
        /**
         * The version of .NET to use. Possible values include `3.1`, `5.0`, `6.0`, `7.0`, `8.0`, `9.0`and `10.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The version of Go to use. Possible values include `1.18`, and `1.19`.
         */
        goVersion?: pulumi.Input<string>;
        /**
         * The Java server type. Possible values include `JAVA`, `TOMCAT`, and `JBOSSEAP`.
         *
         * > **Note:** `JBOSSEAP` requires a Premium Service Plan SKU to be a valid option.
         */
        javaServer?: pulumi.Input<string>;
        /**
         * The Version of the `javaServer` to use.
         */
        javaServerVersion?: pulumi.Input<string>;
        /**
         * The Version of Java to use. Possible values include `8`, `11`, `17`, `21` and `25`.
         *
         * > **Note:** The valid version combinations for `javaVersion`, `javaServer` and `javaServerVersion` can be checked from the command line via `az webapp list-runtimes --os-type linux`.
         *
         * > **Note:** `javaServer`, `javaServerVersion`, and `javaVersion` must all be specified if building a java app
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to run. Possible values include `12-lts`, `14-lts`, `16-lts`, `18-lts`, `20-lts`, `22-lts` and `24-lts`. This property conflicts with `javaVersion`.
         *
         * > **Note:** 10.x versions have been/are being deprecated so may cease to work for new resources in the future and may be removed from the provider.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1`, `8.2`, `8.3` and `8.4`.
         *
         * > **Note:** version `7.4` is deprecated and will be removed from the provider in a future version.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * The version of Python to run. Possible values include `3.14`, `3.13`, `3.12`, `3.11`, `3.10`, `3.9`, `3.8` and `3.7`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * The version of Ruby to run. Possible values include `2.6` and `2.7`.
         */
        rubyVersion?: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigAutoHealSetting {
        /**
         * A `action` block as defined above.
         */
        action?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingTrigger>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingAction {
        /**
         * Predefined action to be taken to an Auto Heal trigger. Possible values include: `Recycle`.
         */
        actionType: pulumi.Input<string>;
        /**
         * The minimum amount of time in `hh:mm:ss` the Linux Web App must have been running before the defined action will be run in the event of a trigger.
         */
        minimumProcessExecutionTime?: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingTrigger {
        /**
         * A `requests` block as defined above.
         */
        requests?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingTriggerRequests>;
        /**
         * A `slowRequest` blocks as defined above.
         */
        slowRequest?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingTriggerSlowRequest>;
        /**
         * One or more `slowRequestWithPath` blocks as defined above.
         */
        slowRequestWithPaths?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingTriggerSlowRequestWithPath>[]>;
        /**
         * One or more `statusCode` blocks as defined above.
         */
        statusCodes?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigAutoHealSettingTriggerStatusCode>[]>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingTriggerRequests {
        /**
         * The number of requests in the specified `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The interval in `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingTriggerSlowRequest {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingTriggerSlowRequestWithPath {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path for which this slow request rule applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigAutoHealSettingTriggerStatusCode {
        /**
         * The number of occurrences of the defined `statusCode` in the specified `interval` on which to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path to which this rule status code applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The status code for this rule, accepts single status codes and status code ranges. e.g. `500` or `400-499`. Possible values are integers between `101` and `599`
         */
        statusCodeRange: pulumi.Input<string>;
        /**
         * The Request Sub Status of the Status Code.
         */
        subStatus?: pulumi.Input<number>;
        /**
         * The Win32 Status Code of the Request.
         */
        win32StatusCode?: pulumi.Input<number>;
    }
    interface LinuxWebAppSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether CORS requests with credentials are allowed. Defaults to `false`
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxWebAppSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxWebAppSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSiteCredential {
        /**
         * The name which should be used for this Linux Web App. Changing this forces a new Linux Web App to be created.
         *
         * > **Note:** Terraform will perform a name availability check as part of the creation progress, if this Web App is part of an App Service Environment terraform will require Read permission on the ASE for this to complete reliably.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Linux Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `BuiltInAuthenticationProviderAzureActiveDirectory`, `BuiltInAuthenticationProviderFacebook`, `BuiltInAuthenticationProviderGoogle`, `BuiltInAuthenticationProviderMicrosoftAccount`, `BuiltInAuthenticationProviderTwitter`, `BuiltInAuthenticationProviderGithub`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Linux Web App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity that issues access tokens for this Linux Web App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Linux Web App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Linux Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, "wl.basic" is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.LinuxWebAppSlotAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppSlotAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppSlotAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * An `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.LinuxWebAppSlotBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Linux Web App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day`, `Hour`
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of the age of backup? Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Linux Web App Slot.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Web App Slot. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotLogs {
        /**
         * A `applicationLogs` block as defined above.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.LinuxWebAppSlotLogsApplicationLogs>;
        /**
         * Should detailed error messages be enabled?
         */
        detailedErrorMessages?: pulumi.Input<boolean>;
        /**
         * Should the failed request tracing be enabled?
         */
        failedRequestTracing?: pulumi.Input<boolean>;
        /**
         * An `httpLogs` block as defined above.
         */
        httpLogs?: pulumi.Input<inputs.appservice.LinuxWebAppSlotLogsHttpLogs>;
    }
    interface LinuxWebAppSlotLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.LinuxWebAppSlotLogsApplicationLogsAzureBlobStorage>;
        /**
         * Log level. Possible values include `Off`, `Verbose`, `Information`, `Warning`, and `Error`.
         */
        fileSystemLevel: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * SAS URL to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotLogsHttpLogs {
        /**
         * A `azureBlobStorageHttp` block as defined above.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.LinuxWebAppSlotLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined above.
         */
        fileSystem?: pulumi.Input<inputs.appservice.LinuxWebAppSlotLogsHttpLogsFileSystem>;
    }
    interface LinuxWebAppSlotLogsHttpLogsAzureBlobStorage {
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays?: pulumi.Input<number>;
        /**
         * SAS URL to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotLogsHttpLogsFileSystem {
        /**
         * The retention period in days. A values of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that log files can use.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface LinuxWebAppSlotSiteConfig {
        /**
         * If this Linux Web App is Always On enabled. Defaults to `true`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL to the API Definition for this Linux Web App Slot.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The API Management API ID this Linux Web App Slot is associated with.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * A `applicationStack` block as defined above.
         */
        applicationStack?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigApplicationStack>;
        /**
         * A `autoHealSetting` block as defined above. Required with `autoHeal`.
         */
        autoHealSetting?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSetting>;
        /**
         * The Linux Web App Slot Name to automatically swap to when deployment to that slot is successfully completed.
         *
         * > **Note:** This must be a valid slot name on the target Linux Web App.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Linux Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The State of FTP / FTPS service. Possible values include `AllAllowed`, `FtpsOnly`, and `Disabled`. Defaults to `Disabled`.
         *
         * > **Note:** Azure defaults this value to `AllAllowed`, however, in the interests of security Terraform will default this to `Disabled` to ensure the user makes a conscious choice to enable it.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to the Health Check.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Should the HTTP2 be enabled?
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigIpRestriction>[]>;
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The Site load balancing. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Use Local MySQL. Defaults to `false`.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values are `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * Should Remote Debugging be enabled? Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigScmIpRestriction>[]>;
        /**
         * The configures the minimum version of TLS required for SSL requests to the SCM site Possible values are `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        scmType?: pulumi.Input<string>;
        /**
         * Should the Linux Web App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Linux Web App use a 32-bit worker? Defaults to `true`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled? Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The number of Workers for this Linux App Service Slot.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface LinuxWebAppSlotSiteConfigApplicationStack {
        /**
         * The docker image, including tag, to be used. e.g. `appsvc/staticsite:latest`.
         */
        dockerImageName?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         *
         * > **Note:** `dockerRegistryUrl`, `dockerRegistryUsername`, and `dockerRegistryPassword` replace the use of the `appSettings` values of `DOCKER_REGISTRY_SERVER_URL`, `DOCKER_REGISTRY_SERVER_USERNAME` and `DOCKER_REGISTRY_SERVER_PASSWORD` respectively, these values will be managed by the provider and should not be specified in the `appSettings` map.
         */
        dockerRegistryPassword?: pulumi.Input<string>;
        /**
         * The URL of the container registry where the `dockerImageName` is located. e.g. `https://index.docker.io` or `https://mcr.microsoft.com`. This value is required with `dockerImageName`.
         */
        dockerRegistryUrl?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         */
        dockerRegistryUsername?: pulumi.Input<string>;
        /**
         * The version of .NET to use. Possible values include `3.1`, `5.0`, `6.0`, `7.0`, `8.0`, `9.0` and `10.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The version of Go to use. Possible values include `1.18`, and `1.19`.
         */
        goVersion?: pulumi.Input<string>;
        /**
         * The Java server type. Possible values include `JAVA`, `TOMCAT`, and `JBOSSEAP`.
         *
         * > **Note:** `JBOSSEAP` requires a Premium Service Plan SKU to be a valid option.
         */
        javaServer?: pulumi.Input<string>;
        /**
         * The Version of the `javaServer` to use.
         */
        javaServerVersion?: pulumi.Input<string>;
        /**
         * The Version of Java to use. Possible values are `8`, `11`, `17` and `21`.
         *
         * > **Note:** The valid version combinations for `javaVersion`, `javaServer` and `javaServerVersion` can be checked from the command line via `az webapp list-runtimes --os-type linux`.
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to run. Possible values are `12-lts`, `14-lts`, `16-lts`, `18-lts`, `20-lts`, `22-lts` and `24-lts`. This property conflicts with `javaVersion`.
         *
         * > **Note:** 10.x versions have been/are being deprecated so may cease to work for new resources in the future and may be removed from the provider.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PHP to run. Possible values are `7.4`, `8.0`, `8.1`, `8.2`, `8.3` and `8.4`.
         *
         * > **Note:** version `7.4` is deprecated and will be removed from the provider in a future version.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * The version of Python to run. Possible values include `3.14`, `3.13`, `3.12`, `3.11`, `3.10`, `3.9`, `3.8` and `3.7`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * The version of Ruby to run. Possible values include `2.6` and `2.7`.
         */
        rubyVersion?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSetting {
        /**
         * A `action` block as defined above.
         */
        action?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingTrigger>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingAction {
        /**
         * Predefined action to be taken to an Auto Heal trigger. Possible values include: `Recycle`.
         */
        actionType: pulumi.Input<string>;
        /**
         * The minimum amount of time in `hh:mm:ss` the Linux Web App must have been running before the defined action will be run in the event of a trigger.
         */
        minimumProcessExecutionTime?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingTrigger {
        /**
         * A `requests` block as defined above.
         */
        requests?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingTriggerRequests>;
        /**
         * A `slowRequest` block as defined above.
         */
        slowRequest?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequest>;
        /**
         * One or more `slowRequestWithPath` blocks as defined above.
         */
        slowRequestWithPaths?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequestWithPath>[]>;
        /**
         * One or more `statusCode` blocks as defined above.
         */
        statusCodes?: pulumi.Input<pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigAutoHealSettingTriggerStatusCode>[]>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingTriggerRequests {
        /**
         * The number of requests in the specified `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The interval in `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequest {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequestWithPath {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path for which this slow request rule applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigAutoHealSettingTriggerStatusCode {
        /**
         * The number of occurrences of the defined `statusCode` in the specified `interval` on which to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path to which this rule status code applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The status code for this rule, accepts single status codes and status code ranges. e.g. `500` or `400-499`. Possible values are integers between `101` and `599`
         */
        statusCodeRange: pulumi.Input<string>;
        /**
         * The Request Sub Status of the Status Code.
         */
        subStatus?: pulumi.Input<number>;
        /**
         * The Win32 Status Code of the Request.
         */
        win32StatusCode?: pulumi.Input<number>;
    }
    interface LinuxWebAppSlotSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether CORS requests with credentials are allowed. Defaults to `false`
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface LinuxWebAppSlotSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.LinuxWebAppSlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppSlotSiteCredential {
        /**
         * The name which should be used for this Linux Web App Slot. Changing this forces a new Linux Web App Slot to be created.
         *
         * > **Note:** Terraform will perform a name availability check as part of the creation progress, if this Web App is part of an App Service Environment terraform will require Read permission on the ASE for this to complete reliably.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface LinuxWebAppSlotStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`
         */
        type: pulumi.Input<string>;
    }
    interface LinuxWebAppStickySettings {
        /**
         * A list of `appSetting` names that the Linux Web App will not swap between Slots when a swap operation is triggered.
         */
        appSettingNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `connectionString` names that the Linux Web App will not swap between Slots when a swap operation is triggered.
         */
        connectionStringNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LinuxWebAppStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`
         */
        type: pulumi.Input<string>;
    }
    interface PlanSku {
        /**
         * Specifies the number of workers associated with this App Service Plan.
         */
        capacity?: pulumi.Input<number>;
        /**
         * Specifies the plan's instance size.
         */
        size: pulumi.Input<string>;
        /**
         * Specifies the plan's pricing tier.
         */
        tier: pulumi.Input<string>;
    }
    interface SlotAuthSettings {
        /**
         * A `activeDirectory` block as defined below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.SlotAuthSettingsActiveDirectory>;
        /**
         * Login parameters to send to the OpenID Connect authorization endpoint when a user logs in. Each parameter must be in the form "key=value".
         */
        additionalLoginParams?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default provider to use when multiple providers have been set up. Possible values are `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount` and `Twitter`.
         *
         * > **NOTE:** When using multiple providers, the default provider must be set for settings like `unauthenticatedClientAction` to work.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Is Authentication enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.SlotAuthSettingsFacebook>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.SlotAuthSettingsGoogle>;
        /**
         * Issuer URI. When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.SlotAuthSettingsMicrosoft>;
        /**
         * The runtime version of the Authentication/Authorization module.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72`.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * If enabled the module will durably store platform-specific security tokens that are obtained during login flows. Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.SlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values are `AllowAnonymous` and `RedirectToLoginPage`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface SlotAuthSettingsActiveDirectory {
        /**
         * Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Client ID of this relying party application. Enables OpenIDConnection authentication with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of this relying party application. If no secret is provided, implicit flow will be used.
         */
        clientSecret?: pulumi.Input<string>;
    }
    interface SlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login.
         */
        appSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Facebook login authentication. <https://developers.facebook.com/docs/facebook-login>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. <https://developers.google.com/identity/sign-in/web/>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication.
         */
        clientSecret: pulumi.Input<string>;
        /**
         * The OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. <https://msdn.microsoft.com/en-us/library/dn631845.aspx>
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SlotAuthSettingsTwitter {
        /**
         * The consumer key of the Twitter app used for login
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The consumer secret of the Twitter app used for login.
         */
        consumerSecret: pulumi.Input<string>;
    }
    interface SlotConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the Connection String. Possible values are `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The value for the Connection String.
         */
        value: pulumi.Input<string>;
    }
    interface SlotIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service slot.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service slot.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the App Service. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you), `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field, and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities.
         *
         * > **NOTE:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the App Service has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface SlotLogs {
        /**
         * An `applicationLogs` block as defined below.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.SlotLogsApplicationLogs>;
        /**
         * Should `Detailed error messages` be enabled on this App Service slot? Defaults to `false`.
         */
        detailedErrorMessagesEnabled?: pulumi.Input<boolean>;
        /**
         * Should `Failed request tracing` be enabled on this App Service slot? Defaults to `false`.
         */
        failedRequestTracingEnabled?: pulumi.Input<boolean>;
        /**
         * An `httpLogs` block as defined below.
         */
        httpLogs?: pulumi.Input<inputs.appservice.SlotLogsHttpLogs>;
    }
    interface SlotLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.SlotLogsApplicationLogsAzureBlobStorage>;
        /**
         * The file system log level. Possible values are `Off`, `Error`, `Warning`, `Information`, and `Verbose`. Defaults to `Off`.
         */
        fileSystemLevel?: pulumi.Input<string>;
    }
    interface SlotLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The URL to the storage container, with a Service SAS token appended.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface SlotLogsHttpLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.SlotLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined below.
         */
        fileSystem?: pulumi.Input<inputs.appservice.SlotLogsHttpLogsFileSystem>;
    }
    interface SlotLogsHttpLogsAzureBlobStorage {
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The URL to the storage container, with a Service SAS token appended.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface SlotLogsHttpLogsFileSystem {
        /**
         * The number of days to retain logs for.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that HTTP log files can use before being removed.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface SlotSiteConfig {
        /**
         * Are Managed Identity Credentials used for Azure Container Registry pull
         */
        acrUseManagedIdentityCredentials?: pulumi.Input<boolean>;
        /**
         * If using User Managed Identity, the User Managed Identity Client Id
         *
         * > **NOTE:** When using User Managed Identity with Azure Container Registry the Identity will need to have the [ACRPull role assigned](https://docs.microsoft.com/azure/container-registry/container-registry-authentication-managed-identity#example-1-access-with-a-user-assigned-identity)
         */
        acrUserManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should the slot be loaded at all times? Defaults to `false`.
         *
         * > **NOTE:** when using an App Service Plan in the `Free` or `Shared` Tiers `alwaysOn` must be set to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * App command line to launch, e.g. `/sbin/myserver -b 0.0.0.0`.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The name of the slot to automatically swap to during deployment
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.appservice.SlotSiteConfigCors>;
        /**
         * The ordering of default documents to load, if an address isn't specified.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The version of the .NET framework's CLR used in this App Service Slot. Possible values are `v2.0` (which will use the latest version of the .NET framework for the .NET CLR v2 - currently `.net 3.5`), `v4.0` (which corresponds to the latest version of the .NET CLR v4 - which at the time of writing is `.net 4.7.1`), `v5.0` and `v6.0`. [For more information on which .NET CLR version to use based on the .NET framework you're targeting - please see this table](https://en.wikipedia.org/wiki/.NET_Framework_version_history#Overview). Defaults to `v4.0`.
         */
        dotnetFrameworkVersion?: pulumi.Input<string>;
        /**
         * State of FTP / FTPS service for this App Service Slot. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The health check path to be pinged by App Service Slot. [For more information - please see App Service health check announcement](https://azure.github.io/AppService/2020/08/24/healthcheck-on-app-service.html).
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Is HTTP2 Enabled on this App Service? Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * A list of objects representing ip restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `ipRestriction` to empty slice (`[]`) to remove it.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.SlotSiteConfigIpRestriction>[]>;
        /**
         * The Java Container to use. If specified `javaVersion` and `javaContainerVersion` must also be specified. Possible values are `JAVA`, `JETTY`, and `TOMCAT`.
         */
        javaContainer?: pulumi.Input<string>;
        /**
         * The version of the Java Container to use. If specified `javaVersion` and `javaContainer` must also be specified.
         */
        javaContainerVersion?: pulumi.Input<string>;
        /**
         * The version of Java to use. If specified `javaContainer` and `javaContainerVersion` must also be specified. Possible values are `1.7`, `1.8`, and `11` and their specific versions - except for Java 11 (e.g. `1.7.0_80`, `1.8.0_181`, `11`)
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * Linux App Framework and version for the App Service Slot. Possible options are a Docker container (`DOCKER|<user/image:tag>`), a base-64 encoded Docker Compose file (`COMPOSE|${filebase64("compose.yml")}`) or a base-64 encoded Kubernetes Manifest (`KUBE|${filebase64("kubernetes.yml")}`).
         *
         * > **NOTE:** To set this property the App Service Plan to which the App belongs must be configured with `kind = "Linux"`, and `reserved = true` or the API will reject any value supplied.
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * Is "MySQL In App" Enabled? This runs a local MySQL instance with your app and shares resources from the App Service plan.
         *
         * > **NOTE:** MySQL In App is not intended for production environments and will not scale beyond a single instance. Instead you may wish to use Azure Database for MySQL.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * The Managed Pipeline Mode. Possible values are `Integrated` and `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The minimum supported TLS version for the app service. Possible values are `1.0`, `1.1`, and `1.2`. Defaults to `1.2` for new app services.
         */
        minTlsVersion?: pulumi.Input<string>;
        /**
         * The scaled number of workers (for per site scaling) of this App Service Slot. Requires that `perSiteScaling` is enabled on the `azure.appservice.Plan`. [For more information - please see Microsoft documentation on high-density hosting](https://docs.microsoft.com/azure/app-service/manage-scale-per-app).
         */
        numberOfWorkers?: pulumi.Input<number>;
        /**
         * The version of PHP to use in this App Service Slot. Possible values are `5.5`, `5.6`, `7.0`, `7.1`, `7.2`, `7.3`, and `7.4`.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * The version of Python to use in this App Service Slot. Possible values are `2.7` and `3.4`.
         */
        pythonVersion?: pulumi.Input<string>;
        /**
         * Is Remote Debugging Enabled? Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * Which version of Visual Studio should the Remote Debugger be compatible with? Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * A list of `scmIpRestriction` objects representing IP restrictions as defined below.
         *
         * > **NOTE** User has to explicitly set `scmIpRestriction` to empty slice (`[]`) to remove it.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.SlotSiteConfigScmIpRestriction>[]>;
        /**
         * The type of Source Control enabled for this App Service Slot. Defaults to `None`. Possible values are: `BitbucketGit`, `BitbucketHg`, `CodePlexGit`, `CodePlexHg`, `Dropbox`, `ExternalGit`, `ExternalHg`, `GitHub`, `LocalGit`, `None`, `OneDrive`, `Tfs`, `VSO`, and `VSTSRM`
         */
        scmType?: pulumi.Input<string>;
        /**
         * IP security restrictions for scm to use main. Defaults to `false`.
         *
         * > **NOTE** Any `scmIpRestriction` blocks configured are ignored by the service when `scmUseMainIpRestriction` is set to `true`. Any scm restrictions will become active if this is subsequently set to `false` or removed.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the App Service Slot run in 32 bit mode, rather than 64 bit mode?
         *
         * > **NOTE:** when using an App Service Plan in the `Free` or `Shared` Tiers `use32BitWorkerProcess` must be set to `true`.
         */
        use32BitWorkerProcess?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have Virtual Network Security Groups and User Defined Routes applied? Defaults to `false`.
         *
         * > **NOTE:** This setting supersedes the previous mechanism of setting the `appSettings` value of `WEBSITE_VNET_ROUTE_ALL`. However, to prevent older configurations breaking Terraform will update this value if it not explicitly set to the value in `app_settings.WEBSITE_VNET_ROUTE_ALL`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should WebSockets be enabled?
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The Windows Docker container image (`DOCKER|<user/image:tag>`)
         *
         * Additional examples of how to run Containers via the `azure.appservice.Slot` resource can be found in the `./examples/app-service` directory within the GitHub Repository.
         */
        windowsFxVersion?: pulumi.Input<string>;
    }
    interface SlotSiteConfigCors {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials supported?
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface SlotSiteConfigIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `ipRestriction` as defined below. The HTTP header filters are evaluated after the rule itself and both conditions must be true for the rule to apply.
         */
        headers?: pulumi.Input<inputs.appservice.SlotSiteConfigIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface SlotSiteConfigIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SlotSiteConfigScmIpRestriction {
        /**
         * Allow or Deny access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `scmIpRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.appservice.SlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **NOTE:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface SlotSiteConfigScmIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is "1".
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SlotSiteCredential {
        /**
         * The password associated with the username, which can be used to publish to this App Service.
         */
        password?: pulumi.Input<string>;
        /**
         * The username which can be used to publish to this App Service
         */
        username?: pulumi.Input<string>;
    }
    interface SlotStorageAccount {
        /**
         * The access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The name of the storage account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path to mount the storage within the site's runtime environment.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name of the storage account identifier.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the file share (container name, for Blob storage).
         */
        shareName: pulumi.Input<string>;
        /**
         * The type of storage. Possible values are `AzureBlob` and `AzureFiles`.
         */
        type: pulumi.Input<string>;
    }
    interface SourceControlGithubActionConfiguration {
        /**
         * A `codeConfiguration` block as defined above. Changing this forces a new resource to be created.
         */
        codeConfiguration?: pulumi.Input<inputs.appservice.SourceControlGithubActionConfigurationCodeConfiguration>;
        /**
         * A `containerConfiguration` block as defined above.
         */
        containerConfiguration?: pulumi.Input<inputs.appservice.SourceControlGithubActionConfigurationContainerConfiguration>;
        /**
         * Whether to generate the GitHub work flow file. Defaults to `true`. Changing this forces a new resource to be created.
         */
        generateWorkflowFile?: pulumi.Input<boolean>;
        /**
         * Denotes this action uses a Linux base image.
         */
        linuxAction?: pulumi.Input<boolean>;
    }
    interface SourceControlGithubActionConfigurationCodeConfiguration {
        /**
         * The value to use for the Runtime Stack in the workflow file content for code base apps. Possible values are `dotnetcore`, `spring`, `tomcat`, `node` and `python`. Changing this forces a new resource to be created.
         */
        runtimeStack: pulumi.Input<string>;
        /**
         * The value to use for the Runtime Version in the workflow file content for code base apps. Changing this forces a new resource to be created.
         */
        runtimeVersion: pulumi.Input<string>;
    }
    interface SourceControlGithubActionConfigurationContainerConfiguration {
        /**
         * The image name for the build. Changing this forces a new resource to be created.
         */
        imageName: pulumi.Input<string>;
        /**
         * The password used to upload the image to the container registry. Changing this forces a new resource to be created.
         */
        registryPassword?: pulumi.Input<string>;
        /**
         * The server URL for the container registry where the build will be hosted. Changing this forces a new resource to be created.
         */
        registryUrl: pulumi.Input<string>;
        /**
         * The username used to upload the image to the container registry. Changing this forces a new resource to be created.
         */
        registryUsername?: pulumi.Input<string>;
    }
    interface SourceControlSlotGithubActionConfiguration {
        /**
         * A `codeConfiguration` block as detailed below. Changing this forces a new resource to be created.
         */
        codeConfiguration?: pulumi.Input<inputs.appservice.SourceControlSlotGithubActionConfigurationCodeConfiguration>;
        /**
         * A `containerConfiguration` block as detailed below.
         */
        containerConfiguration?: pulumi.Input<inputs.appservice.SourceControlSlotGithubActionConfigurationContainerConfiguration>;
        /**
         * Should the service generate the GitHub Action Workflow file. Defaults to `true` Changing this forces a new resource to be created.
         */
        generateWorkflowFile?: pulumi.Input<boolean>;
        /**
         * Denotes this action uses a Linux base image.
         */
        linuxAction?: pulumi.Input<boolean>;
    }
    interface SourceControlSlotGithubActionConfigurationCodeConfiguration {
        /**
         * The value to use for the Runtime Stack in the workflow file content for code base apps. Changing this forces a new resource to be created. Possible values are `dotnetcore`, `spring`, `tomcat`, `node` and `python`.
         */
        runtimeStack: pulumi.Input<string>;
        /**
         * The value to use for the Runtime Version in the workflow file content for code base apps. Changing this forces a new resource to be created.
         */
        runtimeVersion: pulumi.Input<string>;
    }
    interface SourceControlSlotGithubActionConfigurationContainerConfiguration {
        /**
         * The image name for the build. Changing this forces a new resource to be created.
         */
        imageName: pulumi.Input<string>;
        /**
         * The password used to upload the image to the container registry. Changing this forces a new resource to be created.
         */
        registryPassword?: pulumi.Input<string>;
        /**
         * The server URL for the container registry where the build will be hosted. Changing this forces a new resource to be created.
         */
        registryUrl: pulumi.Input<string>;
        /**
         * The username used to upload the image to the container registry. Changing this forces a new resource to be created.
         */
        registryUsername?: pulumi.Input<string>;
    }
    interface StaticSiteIdentity {
        /**
         * A list of Managed Identity IDs which should be assigned to this Static Site resource.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * (Optional) The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity assigned to this Static Site resource. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface StaticWebAppBasicAuth {
        /**
         * The Environment types to use the Basic Auth for access. Possible values include `AllEnvironments` and `StagingEnvironments`.
         */
        environments: pulumi.Input<string>;
        /**
         * The password for the basic authentication access.
         */
        password: pulumi.Input<string>;
    }
    interface StaticWebAppIdentity {
        /**
         * A list of Managed Identity IDs which should be assigned to this Static Web App resource.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity assigned to this Static Web App resource. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Function App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Windows Function App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens for this Windows Function App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsMicrosoft>;
        /**
         * The Runtime Version of the Authentication / Authorization feature in use for the Windows Function App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Windows Function App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, `wl.basic` is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface WindowsFunctionAppBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.WindowsFunctionAppBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface WindowsFunctionAppBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Windows Function App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day` and `Hour`.
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppConnectionString {
        /**
         * The name which should be used for this Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface WindowsFunctionAppIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Function App.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Function App. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSiteConfig {
        /**
         * If this Windows Function App is Always On enabled. Defaults to `false`.
         *
         * > **Note:** when running in a Consumption or Premium Plan, `alwaysOn` feature should be turned off. Please turn it off before upgrading the service plan from standard to premium.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL of the API definition that describes this Windows Function App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The ID of the API Management API for this Windows Function App.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * An `appServiceLogs` block as defined above.
         */
        appServiceLogs?: pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigAppServiceLogs>;
        /**
         * The Connection String for linking the Windows Function App to Application Insights.
         */
        applicationInsightsConnectionString?: pulumi.Input<string>;
        /**
         * The Instrumentation Key for connecting the Windows Function App to Application Insights.
         */
        applicationInsightsKey?: pulumi.Input<string>;
        /**
         * An `applicationStack` block as defined above.
         *
         * > **Note:** If this is set, there must not be an application setting `FUNCTIONS_WORKER_RUNTIME`.
         */
        applicationStack?: pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigApplicationStack>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Windows Function App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is detailed error logging enabled
         */
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The number of minimum instances for this Windows Function App. Only affects apps on Elastic Premium plans.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this Windows Function App. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to be checked for this Windows Function App health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigIpRestriction>[]>;
        /**
         * The Site load balancing mode. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * Configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this Windows Function App. Only affects apps on an Elastic Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * Should Scale Monitoring of the Functions Runtime be enabled?
         *
         * > **Note:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigScmIpRestriction>[]>;
        /**
         * Configures the minimum version of TLS required for SSL requests to the SCM site. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        /**
         * The SCM Type in use by the Windows Function App.
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Windows Function App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Windows Function App use a 32-bit worker process. Defaults to `true`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The Windows FX Version string.
         */
        windowsFxVersion?: pulumi.Input<string>;
        /**
         * The number of Workers for this Windows Function App.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface WindowsFunctionAppSiteConfigAppServiceLogs {
        /**
         * The amount of disk space to use for logs. Valid values are between `25` and `100`. Defaults to `35`.
         */
        diskQuotaMb?: pulumi.Input<number>;
        /**
         * The retention period for logs in days. Valid values are between `0` and `99999`.(never delete).
         *
         * > **Note:** This block is not supported on Consumption plans.
         */
        retentionPeriodDays?: pulumi.Input<number>;
    }
    interface WindowsFunctionAppSiteConfigApplicationStack {
        /**
         * The version of .NET to use. Possible values include `v3.0`, `v4.0` `v6.0`, `v7.0`, `v8.0`, `v9.0` and `v10.0`. Defaults to `v4.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The Version of Java to use. Supported versions include `1.8`, `11`, `17`, `21`, `25` (In-Preview).
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to run. Possible values include `~12`, `~14`, `~16`, `~18` `~20`, `~22` and `~24`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PowerShell Core to run. Possible values are `7`, `7.2`, and `7.4`.
         *
         * > **Note:** A value of `7` will provide the latest stable version. `7.2` is in preview at the time of writing.
         */
        powershellCoreVersion?: pulumi.Input<string>;
        /**
         * Should the Windows Function App use a custom runtime?
         */
        useCustomRuntime?: pulumi.Input<boolean>;
        /**
         * Should the DotNet process use an isolated runtime. Defaults to `false`.
         */
        useDotnetIsolatedRuntime?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials allowed in CORS requests? Defaults to `false`.
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsFunctionAppSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSiteCredential {
        /**
         * The name which should be used for this Windows Function App. Changing this forces a new Windows Function App to be created. Limit the function name to 32 characters to avoid naming collisions. For more information about [Function App naming rule](https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/resource-name-rules#microsoftweb) and [Host ID Collisions](https://github.com/Azure/azure-functions-host/wiki/Host-IDs#host-id-collisions)
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettings {
        /**
         * an `activeDirectory` block as detailed below.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * a `facebook` block as detailed below.
         */
        facebook?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsFacebook>;
        /**
         * a `github` block as detailed below.
         */
        github?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsGithub>;
        /**
         * a `google` block as detailed below.
         */
        google?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * a `microsoft` block as detailed below.
         */
        microsoft?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Windows Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * a `twitter` block as detailed below.
         */
        twitter?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook Login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * an `oauthScopes`.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, "openid", "profile", and "email" are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, `wl.basic` is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * a `schedule` block as detailed below.
         */
        schedule: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day` and `Hour`.
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotConnectionString {
        /**
         * The name which should be used for this Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Function App Slot.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Function App Slot. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotSiteConfig {
        /**
         * If this Windows Web App is Always On enabled. Defaults to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL of the API definition that describes this Windows Function App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The ID of the API Management API for this Windows Function App.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The program and any arguments used to launch this app via the command line. (Example `node myapp.js`).
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * The number of workers this function app can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * an `appServiceLogs` block as detailed below.
         */
        appServiceLogs?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigAppServiceLogs>;
        /**
         * The Connection String for linking the Windows Function App to Application Insights.
         */
        applicationInsightsConnectionString?: pulumi.Input<string>;
        /**
         * The Instrumentation Key for connecting the Windows Function App to Application Insights.
         */
        applicationInsightsKey?: pulumi.Input<string>;
        /**
         * an `applicationStack` block as detailed below.
         */
        applicationStack?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigApplicationStack>;
        /**
         * The name of the slot to automatically swap with when this slot is successfully deployed.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * a `cors` block as detailed below.
         */
        cors?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Windows Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is detailed error logging enabled
         */
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The number of minimum instances for this Windows Function App. Only affects apps on Elastic Premium plans.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this function app. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `Disabled`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * The amount of time in minutes that a node is unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Defaults to `0`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to be checked for this function app health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies if the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * an `ipRestriction` block as detailed below.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigIpRestriction>[]>;
        /**
         * The Site load balancing mode. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * The Managed Pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this function app. Only affects apps on an Elastic Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * Should Scale Monitoring of the Functions Runtime be enabled?
         *
         * > **Note:** Functions runtime scale monitoring can only be enabled for Elastic Premium Function Apps or Workflow Standard Logic Apps and requires a minimum prewarmed instance count of 1.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * a `scmIpRestriction` block as detailed below.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigScmIpRestriction>[]>;
        /**
         * Configures the minimum version of TLS required for SSL requests to the SCM site Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        /**
         * The SCM Type in use by the Windows Function App.
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Windows Function App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Windows Web App use a 32-bit worker. Defaults to `true`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        /**
         * The Windows FX Version string.
         */
        windowsFxVersion?: pulumi.Input<string>;
        /**
         * The number of Workers for this Windows Function App.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface WindowsFunctionAppSlotSiteConfigAppServiceLogs {
        /**
         * The amount of disk space to use for logs. Valid values are between `25` and `100`. Defaults to `35`.
         */
        diskQuotaMb?: pulumi.Input<number>;
        /**
         * The retention period for logs in days. Valid values are between `0` and `99999`.(never delete).
         *
         * > **Note:** This block is not supported on Consumption plans.
         */
        retentionPeriodDays?: pulumi.Input<number>;
    }
    interface WindowsFunctionAppSlotSiteConfigApplicationStack {
        /**
         * The version of .Net. Possible values are `v3.0`, `v4.0`, `v6.0`, `v7.0`, `v8.0`, `v9.0` and `v10.0`. Defaults to `v4.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * The version of Java to use. Possible values are `1.8`, `11`, `17` and `21`.
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of Node to use. Possible values are `~12`, `~14`, `~16`, `~18`, `~20`, `~22` and `~24`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The PowerShell Core version to use. Possible values are `7`, `7.2`, and `7.4`.
         */
        powershellCoreVersion?: pulumi.Input<string>;
        /**
         * Does the Function App use a custom Application Stack?
         */
        useCustomRuntime?: pulumi.Input<boolean>;
        /**
         * Should the DotNet process use an isolated runtime. Defaults to `false`.
         */
        useDotnetIsolatedRuntime?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSlotSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials allowed in CORS requests? Defaults to `false`.
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface WindowsFunctionAppSlotSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * a `headers` block as detailed below.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * a `headers` block as detailed below.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsFunctionAppSlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** Exactly one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppSlotSiteCredential {
        /**
         * The Site Credentials Username used for publishing.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface WindowsFunctionAppSlotStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles`.
         */
        type: pulumi.Input<string>;
    }
    interface WindowsFunctionAppStickySettings {
        /**
         * A list of `appSetting` names that the Windows Function App will not swap between Slots when a swap operation is triggered.
         */
        appSettingNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `connectionString` names that the Windows Function App will not swap between Slots when a swap operation is triggered.
         */
        connectionStringNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsFunctionAppStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles`.
         */
        type: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature is enabled for the Windows Web App be enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens for this Windows Web App.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Windows Web App.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Windows Web App durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, "wl.basic" is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.WindowsWebAppAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface WindowsWebAppAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface WindowsWebAppBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.WindowsWebAppBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Windows Web App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day`, `Hour`
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface WindowsWebAppConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface WindowsWebAppIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Web App.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Web App. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsWebAppLogs {
        /**
         * A `applicationLogs` block as defined above.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.WindowsWebAppLogsApplicationLogs>;
        /**
         * Should detailed error messages be enabled.
         */
        detailedErrorMessages?: pulumi.Input<boolean>;
        /**
         * Should tracing be enabled for failed requests.
         */
        failedRequestTracing?: pulumi.Input<boolean>;
        /**
         * A `httpLogs` block as defined above.
         */
        httpLogs?: pulumi.Input<inputs.appservice.WindowsWebAppLogsHttpLogs>;
    }
    interface WindowsWebAppLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.WindowsWebAppLogsApplicationLogsAzureBlobStorage>;
        /**
         * Log level. Possible values include: `Off`, `Verbose`, `Information`, `Warning`, and `Error`.
         */
        fileSystemLevel: pulumi.Input<string>;
    }
    interface WindowsWebAppLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppLogsHttpLogs {
        /**
         * A `azureBlobStorageHttp` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.WindowsWebAppLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined above.
         */
        fileSystem?: pulumi.Input<inputs.appservice.WindowsWebAppLogsHttpLogsFileSystem>;
    }
    interface WindowsWebAppLogsHttpLogsAzureBlobStorage {
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays?: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppLogsHttpLogsFileSystem {
        /**
         * The retention period in days. A values of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that log files can use.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface WindowsWebAppSiteConfig {
        /**
         * If this Windows Web App is Always On enabled. Defaults to `true`.
         *
         * > **Note:** `alwaysOn` must be explicitly set to `false` when using `Free`, `F1`, `D1`, or `Shared` Service Plans.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL to the API Definition for this Windows Web App.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The API Management API ID this Windows Web App Slot is associated with.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * A `applicationStack` block as defined above.
         */
        applicationStack?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigApplicationStack>;
        /**
         * A `autoHealSetting` block as defined above. Required with `autoHeal`.
         */
        autoHealSetting?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSetting>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Windows Web App.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The State of FTP / FTPS service. Possible values include: `AllAllowed`, `FtpsOnly`, `Disabled`. Defaults to `Disabled`.
         *
         * > **Note:** Azure defaults this value to `AllAllowed`, however, in the interests of security Terraform will default this to `Disabled` to ensure the user makes a conscious choice to enable it.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * One or more `handlerMapping` blocks as defined below.
         */
        handlerMappings?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigHandlerMapping>[]>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to the Health Check.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Should the HTTP2 be enabled?
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigIpRestriction>[]>;
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The Site load balancing. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Use Local MySQL. Defaults to `false`.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values include: `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigScmIpRestriction>[]>;
        /**
         * The configures the minimum version of TLS required for SSL requests to the SCM site Possible values are `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        scmType?: pulumi.Input<string>;
        /**
         * Should the Windows Web App `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Windows Web App use a 32-bit worker. Defaults to `true`.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * One or more `virtualApplication` blocks as defined below.
         */
        virtualApplications?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigVirtualApplication>[]>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        windowsFxVersion?: pulumi.Input<string>;
        /**
         * The number of Workers for this Windows App Service.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface WindowsWebAppSiteConfigApplicationStack {
        /**
         * The Application Stack for the Windows Web App. Possible values include `dotnet`, `dotnetcore`, `node`, `python`, `php`, and `java`.
         *
         * > **Note:** Whilst this property is Optional omitting it can cause unexpected behaviour, in particular for display of settings in the Azure Portal.
         *
         * > **Note:** Windows Web apps can configure multiple `appStack` properties, it is recommended to always configure this `Optional` value and set it to the primary application stack of your app to ensure correct operation of this resource and display the correct metadata in the Azure Portal.
         */
        currentStack?: pulumi.Input<string>;
        /**
         * The docker image, including tag, to be used. e.g. `azure-app-service/windows/parkingpage:latest`.
         */
        dockerImageName?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         *
         * > **Note:** `dockerRegistryUrl`, `dockerRegistryUsername`, and `dockerRegistryPassword` replace the use of the `appSettings` values of `DOCKER_REGISTRY_SERVER_URL`, `DOCKER_REGISTRY_SERVER_USERNAME` and `DOCKER_REGISTRY_SERVER_PASSWORD` respectively, these values will be managed by the provider and should not be specified in the `appSettings` map.
         */
        dockerRegistryPassword?: pulumi.Input<string>;
        /**
         * The URL of the container registry where the `dockerImageName` is located. e.g. `https://index.docker.io` or `https://mcr.microsoft.com`. This value is required with `dockerImageName`.
         */
        dockerRegistryUrl?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         */
        dockerRegistryUsername?: pulumi.Input<string>;
        /**
         * The version of .NET to use when `currentStack` is set to `dotnetcore`. Possible values include `v4.0`.
         */
        dotnetCoreVersion?: pulumi.Input<string>;
        /**
         * The version of .NET to use when `currentStack` is set to `dotnet`. Possible values include `v2.0`,`v3.0`, `v4.0`, `v5.0`, `v6.0`, `v7.0`, `v8.0`, `v9.0` and `v10.0`.
         *
         * > **Note:** The Portal displayed values and the actual underlying API values differ for this setting, as follows:
         * Portal Value | API value
         * :--|--:
         * ASP.NET V3.5 | v2.0
         * ASP.NET V4.8 | v4.0
         * .NET 6 (LTS) | v6.0
         * .NET 7 (STS) | v7.0
         * .NET 8 (LTS) | v8.0
         * .NET 9 (STS) | v9.0
         * .NET 10 (LTS) | v10.0
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * @deprecated this property has been deprecated in favour of `tomcatVersion` and `javaEmbeddedServerEnabled`
         */
        javaContainer?: pulumi.Input<string>;
        /**
         * @deprecated This property has been deprecated in favour of `tomcatVersion` and `javaEmbeddedServerEnabled`
         */
        javaContainerVersion?: pulumi.Input<string>;
        /**
         * Should the Java Embedded Server (Java SE) be used to run the app.
         */
        javaEmbeddedServerEnabled?: pulumi.Input<boolean>;
        /**
         * The version of Java to use when `currentStack` is set to `java`.
         *
         * > **Note:** For currently supported versions, please see the official documentation. Some example values include: `1.8`, `1.8.0_322`,  `11`, `11.0.14`, `17`, `17.0.2`, `21` and `25`
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of node to use when `currentStack` is set to `node`. Possible values are `~12`, `~14`, `~16`, `~18`, `~20` and `~22`.
         *
         * > **Note:** This property conflicts with `javaVersion`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PHP to use when `currentStack` is set to `php`. Possible values are `7.1`, `7.4` and `Off`.
         *
         * > **Note:** The value `Off` is used to signify latest supported by the service.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * Specifies whether this is a Python app. Defaults to `false`.
         */
        python?: pulumi.Input<boolean>;
        /**
         * The version of Tomcat the Java App should use. Conflicts with `javaEmbeddedServerEnabled`
         *
         * > **Note:** See the official documentation for current supported versions. Some example values include: `10.0`, `10.0.20`.
         */
        tomcatVersion?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSetting {
        /**
         * An `action` block as defined above.
         */
        action: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingTrigger>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingAction {
        /**
         * Predefined action to be taken to an Auto Heal trigger. Possible values include: `Recycle`, `LogEvent`, and `CustomAction`.
         */
        actionType: pulumi.Input<string>;
        /**
         * A `customAction` block as defined below.
         */
        customAction?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingActionCustomAction>;
        /**
         * The minimum amount of time in `hh:mm:ss` the Windows Web App must have been running before the defined action will be run in the event of a trigger.
         */
        minimumProcessExecutionTime?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingActionCustomAction {
        /**
         * The executable to run for the `customAction`.
         */
        executable: pulumi.Input<string>;
        /**
         * The parameters to pass to the specified `executable`.
         */
        parameters?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingTrigger {
        /**
         * The amount of Private Memory to be consumed for this rule to trigger. Possible values are between `102400` and `13631488`.
         */
        privateMemoryKb?: pulumi.Input<number>;
        /**
         * A `requests` block as defined above.
         */
        requests?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingTriggerRequests>;
        /**
         * A `slowRequest` block as defined above.
         */
        slowRequest?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingTriggerSlowRequest>;
        /**
         * One or more `slowRequestWithPath` blocks as defined above.
         */
        slowRequestWithPaths?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingTriggerSlowRequestWithPath>[]>;
        /**
         * One or more `statusCode` blocks as defined above.
         */
        statusCodes?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigAutoHealSettingTriggerStatusCode>[]>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingTriggerRequests {
        /**
         * The number of requests in the specified `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The interval in `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingTriggerSlowRequest {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingTriggerSlowRequestWithPath {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path for which this slow request rule applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigAutoHealSettingTriggerStatusCode {
        /**
         * The number of occurrences of the defined `statusCode` in the specified `interval` on which to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path to which this rule status code applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The status code for this rule, accepts single status codes and status code ranges. e.g. `500` or `400-499`. Possible values are integers between `101` and `599`
         */
        statusCodeRange: pulumi.Input<string>;
        /**
         * The Request Sub Status of the Status Code.
         */
        subStatus?: pulumi.Input<number>;
        /**
         * The Win32 Status Code of the Request.
         */
        win32StatusCode?: pulumi.Input<number>;
    }
    interface WindowsWebAppSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether CORS requests with credentials are allowed. Defaults to `false`
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppSiteConfigHandlerMapping {
        /**
         * Specifies the command-line arguments to be passed to the script processor.
         */
        arguments?: pulumi.Input<string>;
        /**
         * Specifies which extension to be handled by the specified FastCGI application.
         */
        extension: pulumi.Input<string>;
        /**
         * Specifies the absolute path to the FastCGI application.
         */
        scriptProcessorPath: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSiteConfigVirtualApplication {
        /**
         * The physical path for the Virtual Application.
         */
        physicalPath: pulumi.Input<string>;
        /**
         * Should pre-loading be enabled.
         */
        preload: pulumi.Input<boolean>;
        /**
         * One or more `virtualDirectory` blocks as defined below.
         */
        virtualDirectories?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSiteConfigVirtualApplicationVirtualDirectory>[]>;
        /**
         * The Virtual Path for the Virtual Application.
         */
        virtualPath: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteConfigVirtualApplicationVirtualDirectory {
        /**
         * The physical path for the Virtual Application.
         */
        physicalPath?: pulumi.Input<string>;
        /**
         * The Virtual Path for the Virtual Application.
         */
        virtualPath?: pulumi.Input<string>;
    }
    interface WindowsWebAppSiteCredential {
        /**
         * The name which should be used for this Windows Web App. Changing this forces a new Windows Web App to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettings {
        /**
         * An `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsActiveDirectory>;
        /**
         * Specifies a map of login Parameters to send to the OpenID Connect authorization endpoint when a user logs in.
         */
        additionalLoginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies a list of External URLs that can be redirected to as part of logging in or logging out of the Windows Web App Slot.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The default authentication provider to use when multiple providers are configured. Possible values include: `AzureActiveDirectory`, `Facebook`, `Google`, `MicrosoftAccount`, `Twitter`, `Github`.
         *
         * > **Note:** This setting is only needed if multiple providers are configured, and the `unauthenticatedClientAction` is set to "RedirectToLoginPage".
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * Should the Authentication / Authorization feature be enabled for the Windows Web App?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `facebook` block as defined below.
         */
        facebook?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsFacebook>;
        /**
         * A `github` block as defined below.
         */
        github?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsGithub>;
        /**
         * A `google` block as defined below.
         */
        google?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsGoogle>;
        /**
         * The OpenID Connect Issuer URI that represents the entity which issues access tokens for this Windows Web App Slot.
         *
         * > **Note:** When using Azure Active Directory, this value is the URI of the directory tenant, e.g. <https://sts.windows.net/{tenant-guid}/>.
         */
        issuer?: pulumi.Input<string>;
        /**
         * A `microsoft` block as defined below.
         */
        microsoft?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsMicrosoft>;
        /**
         * The RuntimeVersion of the Authentication / Authorization feature in use for the Windows Web App Slot.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionHours?: pulumi.Input<number>;
        /**
         * Should the Windows Web App Slot durably store platform-specific security tokens that are obtained during login flows? Defaults to `false`.
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * A `twitter` block as defined below.
         */
        twitter?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsTwitter>;
        /**
         * The action to take when an unauthenticated client attempts to access the app. Possible values include: `RedirectToLoginPage`, `AllowAnonymous`.
         */
        unauthenticatedClientAction?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsActiveDirectory {
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** The `clientId` value is always considered an allowed audience, so should not be included.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Client ID. Cannot be used with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client. Cannot be used with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsFacebook {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The App Secret of the Facebook app used for Facebook login. Cannot be specified with `appSecretSettingName`.
         */
        appSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook login. Cannot be specified with `appSecret`.
         */
        appSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes to be requested as part of Facebook login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsGithub {
        /**
         * The ID of the GitHub app used for login.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret of the GitHub app used for GitHub login. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of GitHub login authentication.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsGoogle {
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The client secret associated with the Google web application. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google login. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Google Sign-In authentication. If not specified, `openid`, `profile`, and `email` are used as default scopes.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsMicrosoft {
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecretSettingName`.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication. Cannot be specified with `clientSecret`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * Specifies a list of OAuth 2.0 scopes that will be requested as part of Microsoft Account authentication. If not specified, "wl.basic" is used as the default scope.
         */
        oauthScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsTwitter {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecretSettingName`.
         */
        consumerSecret?: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in. Cannot be specified with `consumerSecret`.
         */
        consumerSecretSettingName?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsV2 {
        /**
         * An `activeDirectoryV2` block as defined below.
         */
        activeDirectoryV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2ActiveDirectoryV2>;
        /**
         * An `appleV2` block as defined below.
         */
        appleV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2AppleV2>;
        /**
         * Should the AuthV2 Settings be enabled. Defaults to `false`.
         */
        authEnabled?: pulumi.Input<boolean>;
        /**
         * An `azureStaticWebAppV2` block as defined below.
         */
        azureStaticWebAppV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2AzureStaticWebAppV2>;
        /**
         * The path to the App Auth settings.
         *
         * > **Note:** Relative Paths are evaluated from the Site Root directory.
         */
        configFilePath?: pulumi.Input<string>;
        /**
         * Zero or more `customOidcV2` blocks as defined below.
         */
        customOidcV2s?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2CustomOidcV2>[]>;
        /**
         * The Default Authentication Provider to use when the `unauthenticatedAction` is set to `RedirectToLoginPage`. Possible values include: `apple`, `azureactivedirectory`, `facebook`, `github`, `google`, `twitter` and the `name` of your `customOidcV2` provider.
         *
         * > **Note:** Whilst any value will be accepted by the API for `defaultProvider`, it can leave the app in an unusable state if this value does not correspond to the name of a known provider (either built-in value, or customOidc name) as it is used to build the auth endpoint URI.
         */
        defaultProvider?: pulumi.Input<string>;
        /**
         * The paths which should be excluded from the `unauthenticatedAction` when it is set to `RedirectToLoginPage`.
         *
         * > **Note:** This list should be used instead of setting `WEBSITE_WARMUP_PATH` in `appSettings` as it takes priority.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `facebookV2` block as defined below.
         */
        facebookV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2FacebookV2>;
        /**
         * The convention used to determine the url of the request made. Possible values include `NoProxy`, `Standard`, `Custom`. Defaults to `NoProxy`.
         */
        forwardProxyConvention?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the host of the request.
         */
        forwardProxyCustomHostHeaderName?: pulumi.Input<string>;
        /**
         * The name of the custom header containing the scheme of the request.
         */
        forwardProxyCustomSchemeHeaderName?: pulumi.Input<string>;
        /**
         * A `githubV2` block as defined below.
         */
        githubV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2GithubV2>;
        /**
         * A `googleV2` block as defined below.
         */
        googleV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2GoogleV2>;
        /**
         * The prefix that should precede all the authentication and authorisation paths. Defaults to `/.auth`.
         */
        httpRouteApiPrefix?: pulumi.Input<string>;
        /**
         * A `login` block as defined below.
         */
        login: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2Login>;
        /**
         * A `microsoftV2` block as defined below.
         */
        microsoftV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2MicrosoftV2>;
        /**
         * Should the authentication flow be used for all requests.
         */
        requireAuthentication?: pulumi.Input<boolean>;
        /**
         * Should HTTPS be required on connections? Defaults to `true`.
         */
        requireHttps?: pulumi.Input<boolean>;
        /**
         * The Runtime Version of the Authentication and Authorisation feature of this App. Defaults to `~1`.
         */
        runtimeVersion?: pulumi.Input<string>;
        /**
         * A `twitterV2` block as defined below.
         */
        twitterV2?: pulumi.Input<inputs.appservice.WindowsWebAppSlotAuthSettingsV2TwitterV2>;
        /**
         * The action to take for requests made without authentication. Possible values include `RedirectToLoginPage`, `AllowAnonymous`, `Return401`, and `Return403`. Defaults to `RedirectToLoginPage`.
         */
        unauthenticatedAction?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsV2ActiveDirectoryV2 {
        /**
         * The list of allowed Applications for the Default Authorisation Policy.
         */
        allowedApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Allowed audience values to consider when validating JWTs issued by Azure Active Directory.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Group Names for the Default Authorisation Policy.
         */
        allowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of allowed Identities for the Default Authorisation Policy.
         */
        allowedIdentities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Client to use to authenticate with Azure Active Directory.
         */
        clientId: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate used for signing purposes.
         *
         * !> **Note:** If one `clientSecretSettingName` or `clientSecretCertificateThumbprint` is specified, terraform won't write the client secret or secret certificate thumbprint back to `appSetting`, so make sure they are existed in `appSettings` to function correctly.
         */
        clientSecretCertificateThumbprint?: pulumi.Input<string>;
        /**
         * The App Setting name that contains the client secret of the Client.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * A list of Allowed Client Applications in the JWT Claim.
         */
        jwtAllowedClientApplications?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Allowed Groups in the JWT Claim.
         */
        jwtAllowedGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A map of key-value pairs to send to the Authorisation Endpoint when a user logs in.
         */
        loginParameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure Tenant Endpoint for the Authenticating Tenant. e.g. `https://login.microsoftonline.com/{tenant-guid}/v2.0/`
         *
         * > **Note:** [Here](https://learn.microsoft.com/en-us/entra/identity-platform/authentication-national-cloud#microsoft-entra-authentication-endpoints) is a list of possible authentication endpoints based on the cloud environment. [Here](https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad?tabs=workforce-tenant) is more information to better understand how to configure authentication for Azure App Service or Azure Functions.
         */
        tenantAuthEndpoint: pulumi.Input<string>;
        /**
         * Should the www-authenticate provider should be omitted from the request? Defaults to `false`.
         */
        wwwAuthenticationDisabled?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppSlotAuthSettingsV2AppleV2 {
        /**
         * The OpenID Connect Client ID for the Apple web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Apple Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * A list of Login Scopes provided by this Authentication Provider.
         *
         * > **Note:** This is configured on the Authentication Provider side and is Read Only here.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsV2AzureStaticWebAppV2 {
        /**
         * The ID of the Client to use to authenticate with Azure Static Web App Authentication.
         */
        clientId: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsV2CustomOidcV2 {
        /**
         * The endpoint to make the Authorisation Request as supplied by `openidConfigurationEndpoint` response.
         */
        authorisationEndpoint?: pulumi.Input<string>;
        /**
         * The endpoint that provides the keys necessary to validate the token as supplied by `openidConfigurationEndpoint` response.
         */
        certificationUri?: pulumi.Input<string>;
        /**
         * The Client Credential Method used.
         */
        clientCredentialMethod?: pulumi.Input<string>;
        /**
         * The ID of the Client to use to authenticate with the Custom OIDC.
         */
        clientId: pulumi.Input<string>;
        /**
         * The App Setting name that contains the secret for this Custom OIDC Client. This is generated from `name` above and suffixed with `_PROVIDER_AUTHENTICATION_SECRET`.
         */
        clientSecretSettingName?: pulumi.Input<string>;
        /**
         * The endpoint that issued the Token as supplied by `openidConfigurationEndpoint` response.
         */
        issuerEndpoint?: pulumi.Input<string>;
        /**
         * The name of the Custom OIDC Authentication Provider.
         *
         * > **Note:** An `appSetting` matching this value in upper case with the suffix of `_PROVIDER_AUTHENTICATION_SECRET` is required. e.g. `MYOIDC_PROVIDER_AUTHENTICATION_SECRET` for a value of `myoidc`.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the claim that contains the users name.
         */
        nameClaimType?: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for the Custom OIDC Login.
         */
        openidConfigurationEndpoint: pulumi.Input<string>;
        /**
         * The list of the scopes that should be requested while authenticating.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The endpoint used to request a Token as supplied by `openidConfigurationEndpoint` response.
         */
        tokenEndpoint?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotAuthSettingsV2FacebookV2 {
        /**
         * The App ID of the Facebook app used for login.
         */
        appId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `appSecret` value used for Facebook Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        appSecretSettingName: pulumi.Input<string>;
        /**
         * The version of the Facebook API to be used while logging in.
         */
        graphApiVersion?: pulumi.Input<string>;
        /**
         * The list of scopes that should be requested as part of Facebook Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsV2GithubV2 {
        /**
         * The ID of the GitHub app used for login..
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for GitHub Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of GitHub Login authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsV2GoogleV2 {
        /**
         * Specifies a list of Allowed Audiences that should be requested as part of Google Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OpenID Connect Client ID for the Google web application.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name that contains the `clientSecret` value used for Google Login.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of OAuth 2.0 scopes that should be requested as part of Google Sign-In authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsV2Login {
        /**
         * External URLs that can be redirected to as part of logging in or logging out of the app. This is an advanced setting typically only needed by Windows Store application backends.
         *
         * > **Note:** URLs within the current domain are always implicitly allowed.
         */
        allowedExternalRedirectUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The method by which cookies expire. Possible values include: `FixedTime`, and `IdentityProviderDerived`. Defaults to `FixedTime`.
         */
        cookieExpirationConvention?: pulumi.Input<string>;
        /**
         * The time after the request is made when the session cookie should expire. Defaults to `08:00:00`.
         */
        cookieExpirationTime?: pulumi.Input<string>;
        /**
         * The endpoint to which logout requests should be made.
         */
        logoutEndpoint?: pulumi.Input<string>;
        /**
         * The time after the request is made when the nonce should expire. Defaults to `00:05:00`.
         */
        nonceExpirationTime?: pulumi.Input<string>;
        /**
         * Should the fragments from the request be preserved after the login request is made. Defaults to `false`.
         */
        preserveUrlFragmentsForLogins?: pulumi.Input<boolean>;
        /**
         * The number of hours after session token expiration that a session token can be used to call the token refresh API. Defaults to `72` hours.
         */
        tokenRefreshExtensionTime?: pulumi.Input<number>;
        /**
         * Should the Token Store configuration Enabled. Defaults to `false`
         */
        tokenStoreEnabled?: pulumi.Input<boolean>;
        /**
         * The directory path in the App Filesystem in which the tokens will be stored.
         */
        tokenStorePath?: pulumi.Input<string>;
        /**
         * The name of the app setting which contains the SAS URL of the blob storage containing the tokens.
         */
        tokenStoreSasSettingName?: pulumi.Input<string>;
        /**
         * Should the nonce be validated while completing the login flow. Defaults to `true`.
         */
        validateNonce?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppSlotAuthSettingsV2MicrosoftV2 {
        /**
         * Specifies a list of Allowed Audiences that will be requested as part of Microsoft Sign-In authentication.
         */
        allowedAudiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The OAuth 2.0 client ID that was created for the app used for authentication.
         */
        clientId: pulumi.Input<string>;
        /**
         * The app setting name containing the OAuth 2.0 client secret that was created for the app used for authentication.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        clientSecretSettingName: pulumi.Input<string>;
        /**
         * The list of Login scopes that should be requested as part of Microsoft Account authentication.
         */
        loginScopes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotAuthSettingsV2TwitterV2 {
        /**
         * The OAuth 1.0a consumer key of the Twitter application used for sign-in.
         */
        consumerKey: pulumi.Input<string>;
        /**
         * The app setting name that contains the OAuth 1.0a consumer secret of the Twitter application used for sign-in.
         *
         * !> **Note:** A setting with this name must exist in `appSettings` to function correctly.
         */
        consumerSecretSettingName: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotBackup {
        /**
         * Should this backup job be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this Backup.
         */
        name: pulumi.Input<string>;
        /**
         * A `schedule` block as defined below.
         */
        schedule: pulumi.Input<inputs.appservice.WindowsWebAppSlotBackupSchedule>;
        /**
         * The SAS URL to the container.
         */
        storageAccountUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotBackupSchedule {
        /**
         * How often the backup should be executed (e.g. for weekly backup, this should be set to `7` and `frequencyUnit` should be set to `Day`).
         *
         * > **Note:** Not all intervals are supported on all Windows Web App SKUs. Please refer to the official documentation for appropriate values.
         */
        frequencyInterval: pulumi.Input<number>;
        /**
         * The unit of time for how often the backup should take place. Possible values include: `Day`, `Hour`
         */
        frequencyUnit: pulumi.Input<string>;
        /**
         * Should the service keep at least one backup, regardless of age of backup. Defaults to `false`.
         */
        keepAtLeastOneBackup?: pulumi.Input<boolean>;
        /**
         * The time the backup was last attempted.
         */
        lastExecutionTime?: pulumi.Input<string>;
        /**
         * After how many days backups should be deleted. Defaults to `30`.
         */
        retentionPeriodDays?: pulumi.Input<number>;
        /**
         * When the schedule should start working in RFC-3339 format.
         */
        startTime?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotConnectionString {
        /**
         * The name of the connection String.
         */
        name: pulumi.Input<string>;
        /**
         * Type of database. Possible values include: `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure`, and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The connection string value.
         */
        value: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Web App Slot.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Web App Slot. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotLogs {
        /**
         * A `applicationLogs` block as defined above.
         */
        applicationLogs?: pulumi.Input<inputs.appservice.WindowsWebAppSlotLogsApplicationLogs>;
        /**
         * Should detailed error messages be enabled.
         */
        detailedErrorMessages?: pulumi.Input<boolean>;
        /**
         * Should failed request tracing be enabled.
         */
        failedRequestTracing?: pulumi.Input<boolean>;
        /**
         * An `httpLogs` block as defined above.
         */
        httpLogs?: pulumi.Input<inputs.appservice.WindowsWebAppSlotLogsHttpLogs>;
    }
    interface WindowsWebAppSlotLogsApplicationLogs {
        /**
         * An `azureBlobStorage` block as defined below.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.WindowsWebAppSlotLogsApplicationLogsAzureBlobStorage>;
        /**
         * Log level. Possible values include: `Off`, `Verbose`, `Information`, `Warning`, and `Error`.
         */
        fileSystemLevel: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotLogsApplicationLogsAzureBlobStorage {
        /**
         * The level at which to log. Possible values include `Error`, `Warning`, `Information`, `Verbose` and `Off`. **NOTE:** this field is not available for `httpLogs`
         */
        level: pulumi.Input<string>;
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotLogsHttpLogs {
        /**
         * A `azureBlobStorageHttp` block as defined above.
         */
        azureBlobStorage?: pulumi.Input<inputs.appservice.WindowsWebAppSlotLogsHttpLogsAzureBlobStorage>;
        /**
         * A `fileSystem` block as defined above.
         */
        fileSystem?: pulumi.Input<inputs.appservice.WindowsWebAppSlotLogsHttpLogsFileSystem>;
    }
    interface WindowsWebAppSlotLogsHttpLogsAzureBlobStorage {
        /**
         * The time in days after which to remove blobs. A value of `0` means no retention.
         */
        retentionInDays?: pulumi.Input<number>;
        /**
         * SAS url to an Azure blob container with read/write/list/delete permissions.
         *
         * > **Note:** There isn't enough information to for the provider to generate the `sasUrl` from `data.azurerm_storage_account_sas` and it should be built by hand (i.e. `https://${azurerm_storage_account.example.name}.blob.core.windows.net/${azurerm_storage_container.example.name}${data.azurerm_storage_account_sas.example.sas}&sr=b`).
         */
        sasUrl: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotLogsHttpLogsFileSystem {
        /**
         * The retention period in days. A values of `0` means no retention.
         */
        retentionInDays: pulumi.Input<number>;
        /**
         * The maximum size in megabytes that log files can use.
         */
        retentionInMb: pulumi.Input<number>;
    }
    interface WindowsWebAppSlotSiteConfig {
        /**
         * If this Windows Web App Slot is Always On enabled. Defaults to `true`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The URL to the API Definition for this Windows Web App Slot.
         */
        apiDefinitionUrl?: pulumi.Input<string>;
        /**
         * The API Management API ID this Windows Web App Slot os associated with.
         */
        apiManagementApiId?: pulumi.Input<string>;
        /**
         * The App command line to launch.
         */
        appCommandLine?: pulumi.Input<string>;
        /**
         * A `applicationStack` block as defined above.
         */
        applicationStack?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigApplicationStack>;
        /**
         * A `autoHealSetting` block as defined above. Required with `autoHeal`.
         */
        autoHealSetting?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSetting>;
        /**
         * The Windows Web App Slot Name to automatically swap to when deployment to that slot is successfully completed.
         *
         * > **Note:** This must be a valid slot name on the target Windows Web App Slot.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * The Client ID of the Managed Service Identity to use for connections to the Azure Container Registry.
         */
        containerRegistryManagedIdentityClientId?: pulumi.Input<string>;
        /**
         * Should connections for Azure Container Registry use Managed Identity.
         */
        containerRegistryUseManagedIdentity?: pulumi.Input<boolean>;
        /**
         * A `cors` block as defined above.
         */
        cors?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigCors>;
        /**
         * Specifies a list of Default Documents for the Windows Web App Slot.
         */
        defaultDocuments?: pulumi.Input<pulumi.Input<string>[]>;
        detailedErrorLoggingEnabled?: pulumi.Input<boolean>;
        /**
         * The State of FTP / FTPS service. Possible values include: `AllAllowed`, `FtpsOnly`, `Disabled`. Defaults to `Disabled`.
         *
         * > **Note:** Azure defaults this value to `AllAllowed`, however, in the interests of security Terraform will default this to `Disabled` to ensure the user makes a conscious choice to enable it.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * One or more `handlerMapping` blocks as defined below.
         */
        handlerMappings?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigHandlerMapping>[]>;
        /**
         * The amount of time in minutes that a node can be unhealthy before being removed from the load balancer. Possible values are between `2` and `10`. Only valid in conjunction with `healthCheckPath`.
         */
        healthCheckEvictionTimeInMin?: pulumi.Input<number>;
        /**
         * The path to the Health Check.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Should the HTTP2 be enabled?
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The Default action for traffic that does not match any `ipRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRestriction` blocks as defined above.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigIpRestriction>[]>;
        /**
         * The Site load balancing. Possible values include: `WeightedRoundRobin`, `LeastRequests`, `LeastResponseTime`, `WeightedTotalTraffic`, `RequestHash`, `PerSiteRoundRobin`. Defaults to `LeastRequests` if omitted.
         */
        loadBalancingMode?: pulumi.Input<string>;
        /**
         * Use Local MySQL. Defaults to `false`.
         */
        localMysqlEnabled?: pulumi.Input<boolean>;
        /**
         * Managed pipeline mode. Possible values include: `Integrated`, `Classic`. Defaults to `Integrated`.
         */
        managedPipelineMode?: pulumi.Input<string>;
        /**
         * The configures the minimum version of TLS required for SSL requests. Possible values are `1.1`, `1.3`, `1.2` and `1.0`. Defaults to `1.2`.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        /**
         * Should Remote Debugging be enabled. Defaults to `false`.
         */
        remoteDebuggingEnabled?: pulumi.Input<boolean>;
        /**
         * The Remote Debugging Version. Currently only `VS2022` is supported.
         */
        remoteDebuggingVersion?: pulumi.Input<string>;
        /**
         * The Default action for traffic that does not match any `scmIpRestriction` rule. possible values include `Allow` and `Deny`. Defaults to `Allow`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * One or more `scmIpRestriction` blocks as defined above.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigScmIpRestriction>[]>;
        /**
         * The configures the minimum version of TLS required for SSL requests to the SCM site Possible values are `1.1`, `1.3`, `1.2` and `1.0`. Defaults to `1.2`.
         */
        scmMinimumTlsVersion?: pulumi.Input<string>;
        scmType?: pulumi.Input<string>;
        /**
         * Should the Windows Web App Slot `ipRestriction` configuration be used for the SCM also.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Windows Web App Slot use a 32-bit worker. The default value varies from different service plans.
         */
        use32BitWorker?: pulumi.Input<boolean>;
        /**
         * One or more `virtualApplication` blocks as defined below.
         */
        virtualApplications?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigVirtualApplication>[]>;
        /**
         * Should all outbound traffic to have NAT Gateways, Network Security Groups and User Defined Routes applied? Defaults to `false`.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should Web Sockets be enabled. Defaults to `false`.
         */
        websocketsEnabled?: pulumi.Input<boolean>;
        windowsFxVersion?: pulumi.Input<string>;
        /**
         * The number of Workers for this Windows App Service Slot.
         */
        workerCount?: pulumi.Input<number>;
    }
    interface WindowsWebAppSlotSiteConfigApplicationStack {
        /**
         * The Application Stack for the Windows Web App. Possible values include `dotnet`, `dotnetcore`, `node`, `python`, `php`, and `java`.
         *
         * > **Note:** Whilst this property is Optional omitting it can cause unexpected behaviour, in particular for display of settings in the Azure Portal.
         */
        currentStack?: pulumi.Input<string>;
        /**
         * The docker image, including tag, to be used. e.g. `azure-app-service/windows/parkingpage:latest`.
         */
        dockerImageName?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         *
         * > **Note:** `dockerRegistryUrl`, `dockerRegistryUsername`, and `dockerRegistryPassword` replace the use of the `appSettings` values of `DOCKER_REGISTRY_SERVER_URL`, `DOCKER_REGISTRY_SERVER_USERNAME` and `DOCKER_REGISTRY_SERVER_PASSWORD` respectively, these values will be managed by the provider and should not be specified in the `appSettings` map.
         */
        dockerRegistryPassword?: pulumi.Input<string>;
        /**
         * The URL of the container registry where the `dockerImageName` is located. e.g. `https://index.docker.io` or `https://mcr.microsoft.com`. This value is required with `dockerImageName`.
         */
        dockerRegistryUrl?: pulumi.Input<string>;
        /**
         * The User Name to use for authentication against the registry to pull the image.
         */
        dockerRegistryUsername?: pulumi.Input<string>;
        /**
         * The version of .NET to use when `currentStack` is set to `dotnetcore`. Possible values include `v4.0`.
         */
        dotnetCoreVersion?: pulumi.Input<string>;
        /**
         * The version of .NET to use when `currentStack` is set to `dotnet`. Possible values include `v2.0`,`v3.0`, `v4.0`, `v5.0`, `v6.0`, `v7.0`, `v8.0`, `v9.0` and `v10.0`.
         */
        dotnetVersion?: pulumi.Input<string>;
        /**
         * @deprecated this property has been deprecated in favour of `tomcatVersion` and `javaEmbeddedServerEnabled`
         */
        javaContainer?: pulumi.Input<string>;
        /**
         * @deprecated This property has been deprecated in favour of `tomcatVersion` and `javaEmbeddedServerEnabled`
         */
        javaContainerVersion?: pulumi.Input<string>;
        /**
         * Should the Java Embedded Server (Java SE) be used to run the app.
         */
        javaEmbeddedServerEnabled?: pulumi.Input<boolean>;
        /**
         * The version of Java to use when `currentStack` is set to `java`. Possible values include `1.7`, `1.8`, `11` and `17`. Required with `javaContainer` and `javaContainerVersion`.
         *
         * > **Note:** For compatible combinations of `javaVersion`, `javaContainer` and `javaContainerVersion` users can use `az webapp list-runtimes` from command line.
         */
        javaVersion?: pulumi.Input<string>;
        /**
         * The version of node to use when `currentStack` is set to `node`. Possible values include `~12`, `~14`, `~16`, `~18`, `~20` and `~22`.
         *
         * > **Note:** This property conflicts with `javaVersion`.
         */
        nodeVersion?: pulumi.Input<string>;
        /**
         * The version of PHP to use when `currentStack` is set to `php`. Possible values are `7.1`, `7.4` and `Off`.
         *
         * > **Note:** The value `Off` is used to signify latest supported by the service.
         */
        phpVersion?: pulumi.Input<string>;
        /**
         * The app is a Python app. Defaults to `false`.
         */
        python?: pulumi.Input<boolean>;
        /**
         * The version of Tomcat the Java App should use.
         *
         * > **Note:** See the official documentation for current supported versions.
         */
        tomcatVersion?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSetting {
        /**
         * A `action` block as defined above.
         */
        action: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingTrigger>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingAction {
        /**
         * Predefined action to be taken to an Auto Heal trigger. Possible values are `CustomAction`, `LogEvent` and `Recycle`.
         */
        actionType: pulumi.Input<string>;
        /**
         * A `customAction` block as defined below.
         */
        customAction?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingActionCustomAction>;
        /**
         * The minimum amount of time in `hh:mm:ss` the Windows Web App Slot must have been running before the defined action will be run in the event of a trigger.
         */
        minimumProcessExecutionTime?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingActionCustomAction {
        /**
         * The executable to run for the `customAction`.
         */
        executable: pulumi.Input<string>;
        /**
         * The parameters to pass to the specified `executable`.
         */
        parameters?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingTrigger {
        /**
         * The amount of Private Memory to be consumed for this rule to trigger. Possible values are between `102400` and `13631488`.
         */
        privateMemoryKb?: pulumi.Input<number>;
        /**
         * A `requests` block as defined above.
         */
        requests?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingTriggerRequests>;
        /**
         * A `slowRequest` block as defined above.
         */
        slowRequest?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequest>;
        /**
         * One or more `slowRequestWithPath` blocks as defined above.
         */
        slowRequestWithPaths?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequestWithPath>[]>;
        /**
         * One or more `statusCode` blocks as defined above.
         */
        statusCodes?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigAutoHealSettingTriggerStatusCode>[]>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingTriggerRequests {
        /**
         * The number of requests in the specified `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The interval in `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequest {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingTriggerSlowRequestWithPath {
        /**
         * The number of Slow Requests in the time `interval` to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path for which this slow request rule applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The threshold of time passed to qualify as a Slow Request in `hh:mm:ss`.
         */
        timeTaken: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigAutoHealSettingTriggerStatusCode {
        /**
         * The number of occurrences of the defined `statusCode` in the specified `interval` on which to trigger this rule.
         */
        count: pulumi.Input<number>;
        /**
         * The time interval in the form `hh:mm:ss`.
         */
        interval: pulumi.Input<string>;
        /**
         * The path to which this rule status code applies.
         */
        path?: pulumi.Input<string>;
        /**
         * The status code for this rule, accepts single status codes and status code ranges. e.g. `500` or `400-499`. Possible values are integers between `101` and `599`
         */
        statusCodeRange: pulumi.Input<string>;
        /**
         * The Request Sub Status of the Status Code.
         */
        subStatus?: pulumi.Input<number>;
        /**
         * The Win32 Status Code of the Request.
         */
        win32StatusCode?: pulumi.Input<number>;
    }
    interface WindowsWebAppSlotSiteConfigCors {
        /**
         * Specifies a list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether CORS requests with credentials are allowed. Defaults to `false`
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface WindowsWebAppSlotSiteConfigHandlerMapping {
        /**
         * Specify the command-line arguments to be passed to the script processor.
         */
        arguments?: pulumi.Input<string>;
        /**
         * Specify which extension to be handled by the specified FastCGI application.
         */
        extension: pulumi.Input<string>;
        /**
         * Specify the absolute path to the FastCGI application.
         */
        scriptProcessorPath: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotSiteConfigScmIpRestriction {
        /**
         * The action to take. Possible values are `Allow` or `Deny`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * A `headers` block as defined above.
         */
        headers?: pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigScmIpRestrictionHeaders>;
        /**
         * The CIDR notation of the IP or IP Range to match. For example: `10.0.0.0/24` or `192.168.10.1/32`
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this `ipRestriction`.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority value of this `ipRestriction`. Defaults to `65000`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One and only one of `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigScmIpRestrictionHeaders {
        /**
         * Specifies a list of Azure Front Door IDs.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies if a Front Door Health Probe should be expected. The only possible value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * Specifies a list of addresses for which matching should be applied. Omitting this value means allow any.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Hosts for which matching should be applied.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppSlotSiteConfigVirtualApplication {
        /**
         * The physical path for the Virtual Application.
         */
        physicalPath: pulumi.Input<string>;
        /**
         * Should pre-loading be enabled.
         */
        preload: pulumi.Input<boolean>;
        /**
         * One or more `virtualDirectory` blocks as defined below.
         */
        virtualDirectories?: pulumi.Input<pulumi.Input<inputs.appservice.WindowsWebAppSlotSiteConfigVirtualApplicationVirtualDirectory>[]>;
        /**
         * The Virtual Path for the Virtual Application.
         */
        virtualPath: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteConfigVirtualApplicationVirtualDirectory {
        /**
         * The physical path for the Virtual Application.
         */
        physicalPath?: pulumi.Input<string>;
        /**
         * The Virtual Path for the Virtual Application.
         */
        virtualPath?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotSiteCredential {
        /**
         * The name which should be used for this Windows Web App Slot. Changing this forces a new Windows Web App Slot to be created.
         *
         * > **Note:** Terraform will perform a name availability check as part of the creation progress, if this Web App is part of an App Service Environment terraform will require Read permission on the App Service Environment for this to complete reliably.
         */
        name?: pulumi.Input<string>;
        /**
         * The Site Credentials Password used for publishing.
         */
        password?: pulumi.Input<string>;
    }
    interface WindowsWebAppSlotStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this Storage Account.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`
         */
        type: pulumi.Input<string>;
    }
    interface WindowsWebAppStickySettings {
        /**
         * A list of `appSetting` names that the Windows Web App will not swap between Slots when a swap operation is triggered.
         */
        appSettingNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `connectionString` names that the Windows Web App will not swap between Slots when a swap operation is triggered.
         */
        connectionStringNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WindowsWebAppStorageAccount {
        /**
         * The Access key for the storage account.
         */
        accessKey: pulumi.Input<string>;
        /**
         * The Name of the Storage Account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The path at which to mount the storage share.
         */
        mountPath?: pulumi.Input<string>;
        /**
         * The name which should be used for this TODO.
         */
        name: pulumi.Input<string>;
        /**
         * The Name of the File Share or Container Name for Blob storage.
         */
        shareName: pulumi.Input<string>;
        /**
         * The Azure Storage Type. Possible values include `AzureFiles` and `AzureBlob`
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace arc {
    interface ResourceBridgeApplianceIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Arc Resource Bridge Appliance. The only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace arckubernetes {
    interface ClusterExtensionIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity. The only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface ClusterIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity assigned to this Arc Kubernetes Cluster. At this time the only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface FluxConfigurationBlobStorage {
        /**
         * Specifies the account key (shared key) to access the storage account.
         */
        accountKey?: pulumi.Input<string>;
        /**
         * Specifies the Azure Blob container ID.
         */
        containerId: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * Specifies the shared access token to access the storage container.
         */
        sasToken?: pulumi.Input<string>;
        /**
         * A `servicePrincipal` block as defined below.
         */
        servicePrincipal?: pulumi.Input<inputs.arckubernetes.FluxConfigurationBlobStorageServicePrincipal>;
        /**
         * Specifies the interval at which to re-reconcile the cluster Azure Blob source with the remote.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster Azure Blob source with the remote.
         */
        timeoutInSeconds?: pulumi.Input<number>;
    }
    interface FluxConfigurationBlobStorageServicePrincipal {
        /**
         * Base64-encoded certificate used to authenticate a Service Principal .
         */
        clientCertificateBase64?: pulumi.Input<string>;
        /**
         * Specifies the password for the certificate used to authenticate a Service Principal .
         */
        clientCertificatePassword?: pulumi.Input<string>;
        /**
         * Specifies whether to include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication for the client certificate.
         */
        clientCertificateSendChain?: pulumi.Input<boolean>;
        /**
         * Specifies the client ID for authenticating a Service Principal.
         */
        clientId: pulumi.Input<string>;
        /**
         * Specifies the client secret for authenticating a Service Principal.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * Specifies the tenant ID for authenticating a Service Principal.
         */
        tenantId: pulumi.Input<string>;
    }
    interface FluxConfigurationBucket {
        /**
         * Specifies the plaintext access key used to securely access the S3 bucket.
         */
        accessKey?: pulumi.Input<string>;
        /**
         * Specifies the bucket name to sync from the url endpoint for the flux configuration.
         */
        bucketName: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded secret key used to authenticate with the bucket source.
         */
        secretKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the interval at which to re-reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specify whether to communicate with a bucket using TLS is enabled. Defaults to `true`.
         */
        tlsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the URL to sync for the flux configuration S3 bucket. It must start with `http://` or `https://`.
         */
        url: pulumi.Input<string>;
    }
    interface FluxConfigurationGitRepository {
        /**
         * Specifies the Base64-encoded HTTPS certificate authority contents used to access git private git repositories over HTTPS.
         */
        httpsCaCertBase64?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded HTTPS personal access token or password that will be used to access the repository.
         */
        httpsKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the plaintext HTTPS username used to access private git repositories over HTTPS.
         */
        httpsUser?: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets. It must be between 1 and 63 characters. It can contain only lowercase letters, numbers, and hyphens (-). It must start and end with a lowercase letter or number.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * Specifies the source reference type for the GitRepository object. Possible values are `branch`, `commit`, `semver` and `tag`.
         */
        referenceType: pulumi.Input<string>;
        /**
         * Specifies the source reference value for the GitRepository object.
         */
        referenceValue: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded knownHosts value containing public SSH keys required to access private git repositories over SSH.
         */
        sshKnownHostsBase64?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded SSH private key in PEM format.
         */
        sshPrivateKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the interval at which to re-reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the URL to sync for the flux configuration git repository. It must start with `http://`, `https://`, `git@` or `ssh://`.
         */
        url: pulumi.Input<string>;
    }
    interface FluxConfigurationKustomization {
        /**
         * Specifies other kustomizations that this kustomization depends on. This kustomization will not reconcile until all dependencies have completed their reconciliation.
         */
        dependsOns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether garbage collections of Kubernetes objects created by this kustomization is enabled. Defaults to `false`.
         */
        garbageCollectionEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the kustomization.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the path in the source reference to reconcile on the cluster.
         */
        path?: pulumi.Input<string>;
        /**
         * Whether re-creating Kubernetes resources on the cluster is enabled when patching fails due to an immutable field change. Defaults to `false`.
         */
        recreatingEnabled?: pulumi.Input<boolean>;
        /**
         * The interval at which to re-reconcile the kustomization on the cluster in the event of failure on reconciliation. Defaults to `600`.
         */
        retryIntervalInSeconds?: pulumi.Input<number>;
        /**
         * The interval at which to re-reconcile the kustomization on the cluster. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * The maximum time to attempt to reconcile the kustomization on the cluster. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
    }
    interface ProvisionedClusterAzureActiveDirectory {
        /**
         * A list of IDs of Microsoft Entra ID Groups. All members of the specified Microsoft Entra ID Groups have the cluster administrator access to the Kubernetes cluster.
         */
        adminGroupObjectIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether to enable Azure RBAC for Kubernetes authorization. Defaults to `false`.
         */
        azureRbacEnabled?: pulumi.Input<boolean>;
        /**
         * The Tenant ID to use for authentication. If not specified, the Tenant of the Arc Kubernetes Cluster will be used.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ProvisionedClusterIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of the Managed Identity. The only possible value is `SystemAssigned`. Changing this forces a new Arc Kubernetes Provisioned Cluster to be created.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace arcmachine {
    interface ArcMachineIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity assigned to this Arc Machine. At this time the only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace authorization {
    interface RoleDefinitionPermission {
        /**
         * One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        actions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Allowed Data Actions, such as `*`, `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        dataActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        notActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Disallowed Data Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        notDataActions?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace automanage {
    interface ConfigurationAntimalware {
        /**
         * A `exclusions` block as defined below.
         */
        exclusions?: pulumi.Input<inputs.automanage.ConfigurationAntimalwareExclusions>;
        /**
         * Whether the real time protection is enabled. Defaults to `false`.
         */
        realTimeProtectionEnabled?: pulumi.Input<boolean>;
        /**
         * The day of the scheduled scan. Possible values are `0` to `8` where `0` is daily, `1` to `7` are the days of the week and `8` is Disabled. Defaults to `8`.
         */
        scheduledScanDay?: pulumi.Input<number>;
        /**
         * Whether the scheduled scan is enabled. Defaults to `false`.
         */
        scheduledScanEnabled?: pulumi.Input<boolean>;
        /**
         * The time of the scheduled scan in minutes. Possible values are `0` to `1439` where `0` is 12:00 AM and `1439` is 11:59 PM.
         */
        scheduledScanTimeInMinutes?: pulumi.Input<number>;
        /**
         * The type of the scheduled scan. Possible values are `Quick` and `Full`. Defaults to `Quick`.
         */
        scheduledScanType?: pulumi.Input<string>;
    }
    interface ConfigurationAntimalwareExclusions {
        /**
         * The extensions to exclude from the antimalware scan, separated by `;`. For example `.ext1;.ext2`.
         */
        extensions?: pulumi.Input<string>;
        /**
         * The paths to exclude from the antimalware scan, separated by `;`. For example `C:\\Windows\\Temp;D:\\Temp`.
         */
        paths?: pulumi.Input<string>;
        /**
         * The processes to exclude from the antimalware scan, separated by `;`. For example `svchost.exe;notepad.exe`.
         */
        processes?: pulumi.Input<string>;
    }
    interface ConfigurationAzureSecurityBaseline {
        /**
         * The assignment type of the azure security baseline. Possible values are `ApplyAndAutoCorrect`, `ApplyAndMonitor`, `Audit` and `DeployAndAutoCorrect`. Defaults to `ApplyAndAutoCorrect`.
         */
        assignmentType?: pulumi.Input<string>;
    }
    interface ConfigurationBackup {
        /**
         * The retention range in days of the backup policy. Defaults to `5`.
         */
        instantRpRetentionRangeInDays?: pulumi.Input<number>;
        /**
         * The name of the backup policy.
         */
        policyName?: pulumi.Input<string>;
        /**
         * A `retentionPolicy` block as defined below.
         */
        retentionPolicy?: pulumi.Input<inputs.automanage.ConfigurationBackupRetentionPolicy>;
        /**
         * A `schedulePolicy` block as defined below.
         */
        schedulePolicy?: pulumi.Input<inputs.automanage.ConfigurationBackupSchedulePolicy>;
        /**
         * The timezone of the backup policy. Defaults to `UTC`.
         */
        timeZone?: pulumi.Input<string>;
    }
    interface ConfigurationBackupRetentionPolicy {
        /**
         * A `dailySchedule` block as defined below.
         */
        dailySchedule?: pulumi.Input<inputs.automanage.ConfigurationBackupRetentionPolicyDailySchedule>;
        /**
         * The retention policy type of the backup policy. Possible value is `LongTermRetentionPolicy`. Defaults to `LongTermRetentionPolicy`.
         */
        retentionPolicyType?: pulumi.Input<string>;
        /**
         * A `weeklySchedule` block as defined below.
         */
        weeklySchedule?: pulumi.Input<inputs.automanage.ConfigurationBackupRetentionPolicyWeeklySchedule>;
    }
    interface ConfigurationBackupRetentionPolicyDailySchedule {
        /**
         * A `retentionDuration` block as defined below.
         */
        retentionDuration?: pulumi.Input<inputs.automanage.ConfigurationBackupRetentionPolicyDailyScheduleRetentionDuration>;
        /**
         * The retention times of the backup policy.
         */
        retentionTimes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationBackupRetentionPolicyDailyScheduleRetentionDuration {
        /**
         * The count of the retention duration of the backup policy. Valid value inside `dailySchedule` is `7` to `9999` and inside `weeklySchedule` is `1` to `5163`.
         */
        count?: pulumi.Input<number>;
        /**
         * The duration type of the retention duration of the backup policy. Valid value inside `dailySchedule` is `Days` and inside `weeklySchedule` is `Weeks`. Defaults to `Days`.
         */
        durationType?: pulumi.Input<string>;
    }
    interface ConfigurationBackupRetentionPolicyWeeklySchedule {
        /**
         * A `retentionDuration` block as defined below.
         */
        retentionDuration?: pulumi.Input<inputs.automanage.ConfigurationBackupRetentionPolicyWeeklyScheduleRetentionDuration>;
        /**
         * The retention times of the backup policy.
         */
        retentionTimes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationBackupRetentionPolicyWeeklyScheduleRetentionDuration {
        /**
         * The count of the retention duration of the backup policy. Valid value inside `dailySchedule` is `7` to `9999` and inside `weeklySchedule` is `1` to `5163`.
         */
        count?: pulumi.Input<number>;
        /**
         * The duration type of the retention duration of the backup policy. Valid value inside `dailySchedule` is `Days` and inside `weeklySchedule` is `Weeks`. Defaults to `Days`.
         */
        durationType?: pulumi.Input<string>;
    }
    interface ConfigurationBackupSchedulePolicy {
        /**
         * The schedule policy type of the backup policy. Possible value is `SimpleSchedulePolicy`. Defaults to `SimpleSchedulePolicy`.
         */
        schedulePolicyType?: pulumi.Input<string>;
        /**
         * The schedule run days of the backup policy. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` and `Saturday`.
         */
        scheduleRunDays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The schedule run frequency of the backup policy. Possible values are `Daily` and `Weekly`. Defaults to `Daily`.
         */
        scheduleRunFrequency?: pulumi.Input<string>;
        /**
         * The schedule run times of the backup policy.
         */
        scheduleRunTimes?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace automation {
    interface AccountEncryption {
        /**
         * @deprecated `encryption.key_source` has been deprecated and will be removed in v5.0 of the AzureRM Provider. To disable encryption, omit the `encryption` block
         */
        keySource?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Key which should be used to Encrypt the data in this Automation Account.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The User Assigned Managed Identity ID to be used for accessing the Customer Managed Key for encryption.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * The ID of the User Assigned Identity which should be assigned to this Automation Account.
         *
         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for this Automation Account. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface AccountPrivateEndpointConnection {
        /**
         * The ID of the Automation Account.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the Automation Account. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface ConnectionTypeField {
        /**
         * Whether to set the isEncrypted flag of the connection field definition.
         */
        isEncrypted?: pulumi.Input<boolean>;
        /**
         * Whether to set the isOptional flag of the connection field definition.
         */
        isOptional?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this connection field definition.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the connection field definition.
         */
        type: pulumi.Input<string>;
    }
    interface ModuleModuleLink {
        /**
         * A `hash` block as defined below.
         */
        hash?: pulumi.Input<inputs.automation.ModuleModuleLinkHash>;
        /**
         * The URI of the module content (zip or nupkg).
         */
        uri: pulumi.Input<string>;
    }
    interface ModuleModuleLinkHash {
        /**
         * Specifies the algorithm used for the hash content.
         */
        algorithm: pulumi.Input<string>;
        /**
         * The hash value of the content.
         */
        value: pulumi.Input<string>;
    }
    interface Powershell72ModuleModuleLink {
        /**
         * A `hash` block as defined below.
         */
        hash?: pulumi.Input<inputs.automation.Powershell72ModuleModuleLinkHash>;
        /**
         * The URI of the module content (zip or nupkg).
         */
        uri: pulumi.Input<string>;
    }
    interface Powershell72ModuleModuleLinkHash {
        /**
         * Specifies the algorithm used for the hash content.
         */
        algorithm: pulumi.Input<string>;
        /**
         * The hash value of the content.
         */
        value: pulumi.Input<string>;
    }
    interface RunBookDraft {
        /**
         * A `publishContentLink` block as defined above.
         */
        contentLink?: pulumi.Input<inputs.automation.RunBookDraftContentLink>;
        creationTime?: pulumi.Input<string>;
        /**
         * Whether the draft in edit mode.
         */
        editModeEnabled?: pulumi.Input<boolean>;
        lastModifiedTime?: pulumi.Input<string>;
        /**
         * Specifies the output types of the runbook.
         */
        outputTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of `parameters` block as defined below.
         */
        parameters?: pulumi.Input<pulumi.Input<inputs.automation.RunBookDraftParameter>[]>;
    }
    interface RunBookDraftContentLink {
        /**
         * A `hash` block as defined below.
         */
        hash?: pulumi.Input<inputs.automation.RunBookDraftContentLinkHash>;
        /**
         * The URI of the runbook content.
         */
        uri: pulumi.Input<string>;
        /**
         * Specifies the version of the content
         */
        version?: pulumi.Input<string>;
    }
    interface RunBookDraftContentLinkHash {
        /**
         * Specifies the hash algorithm used to hash the content.
         */
        algorithm: pulumi.Input<string>;
        /**
         * Specifies the expected hash value of the content.
         */
        value: pulumi.Input<string>;
    }
    interface RunBookDraftParameter {
        /**
         * Specifies the default value of the parameter.
         */
        defaultValue?: pulumi.Input<string>;
        /**
         * The name of the parameter.
         */
        key: pulumi.Input<string>;
        /**
         * Whether this parameter is mandatory.
         */
        mandatory?: pulumi.Input<boolean>;
        /**
         * Specifies the position of the parameter.
         */
        position?: pulumi.Input<number>;
        /**
         * Specifies the type of this parameter.
         */
        type: pulumi.Input<string>;
    }
    interface RunBookJobSchedule {
        /**
         * The UUID of automation runbook job schedule ID.
         */
        jobScheduleId?: pulumi.Input<string>;
        /**
         * A map of key/value pairs corresponding to the arguments that can be passed to the Runbook.
         *
         * > **Note:** The parameter keys/names must strictly be in lowercase, even if this is not the case in the runbook. This is due to a limitation in Azure Automation where the parameter names are normalized. The values specified don't have this limitation.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Name of a Hybrid Worker Group the Runbook will be executed on.
         */
        runOn?: pulumi.Input<string>;
        /**
         * The name of the Schedule.
         */
        scheduleName: pulumi.Input<string>;
    }
    interface RunBookPublishContentLink {
        /**
         * A `hash` block as defined below.
         */
        hash?: pulumi.Input<inputs.automation.RunBookPublishContentLinkHash>;
        /**
         * The URI of the runbook content.
         */
        uri: pulumi.Input<string>;
        /**
         * Specifies the version of the content
         */
        version?: pulumi.Input<string>;
    }
    interface RunBookPublishContentLinkHash {
        /**
         * Specifies the hash algorithm used to hash the content.
         */
        algorithm: pulumi.Input<string>;
        /**
         * Specifies the expected hash value of the content.
         */
        value: pulumi.Input<string>;
    }
    interface ScheduleMonthlyOccurrence {
        /**
         * Day of the occurrence. Must be one of `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, `Sunday`.
         */
        day: pulumi.Input<string>;
        /**
         * Occurrence of the week within the month. Must be between `1` and `5`. `-1` for last week within the month.
         */
        occurrence: pulumi.Input<number>;
    }
    interface SoftwareUpdateConfigurationLinux {
        /**
         * Specifies the list of update classifications included in the Software Update Configuration. Possible values are `Unclassified`, `Critical`, `Security` and `Other`.
         */
        classificationsIncludeds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of packages to excluded from the Software Update Configuration.
         */
        excludedPackages?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of packages to included from the Software Update Configuration.
         */
        includedPackages?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the reboot settings after software update, possible values are `IfRequired`, `Never`, `RebootOnly` and `Always`. Defaults to `IfRequired`.
         */
        reboot?: pulumi.Input<string>;
    }
    interface SoftwareUpdateConfigurationPostTask {
        /**
         * Specifies a map of parameters for the task.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of the runbook for the post task.
         */
        source?: pulumi.Input<string>;
    }
    interface SoftwareUpdateConfigurationPreTask {
        /**
         * Specifies a map of parameters for the task.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of the runbook for the pre task.
         */
        source?: pulumi.Input<string>;
    }
    interface SoftwareUpdateConfigurationSchedule {
        /**
         * List of days of the month that the job should execute on. Must be between `1` and `31`. `-1` for last day of the month. Only valid when frequency is `Month`.
         */
        advancedMonthDays?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * List of days of the week that the job should execute on. Only valid when frequency is `Week`. Possible values include `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, and `Sunday`.
         */
        advancedWeekDays?: pulumi.Input<pulumi.Input<string>[]>;
        creationTime?: pulumi.Input<string>;
        /**
         * A description for this Schedule.
         */
        description?: pulumi.Input<string>;
        /**
         * The end time of the schedule.
         */
        expiryTime?: pulumi.Input<string>;
        /**
         * The time offset in minutes for the expiry time.
         */
        expiryTimeOffsetMinutes?: pulumi.Input<number>;
        /**
         * The frequency of the schedule. - can be either `OneTime`, `Day`, `Hour`, `Week`, or `Month`.
         */
        frequency: pulumi.Input<string>;
        /**
         * The number of `frequency`s between runs. Only valid when frequency is `Day`, `Hour`, `Week`, or `Month`.
         */
        interval?: pulumi.Input<number>;
        /**
         * Whether the schedule is enabled. Defaults to `true`.
         */
        isEnabled?: pulumi.Input<boolean>;
        lastModifiedTime?: pulumi.Input<string>;
        /**
         * List of `monthlyOccurrence` blocks as defined below to specifies occurrences of days within a month. Only valid when frequency is `Month`. The `monthlyOccurrence` block supports fields as defined below.
         */
        monthlyOccurrence?: pulumi.Input<inputs.automation.SoftwareUpdateConfigurationScheduleMonthlyOccurrence>;
        nextRun?: pulumi.Input<string>;
        /**
         * The time offset in minutes for the next run time.
         */
        nextRunOffsetMinutes?: pulumi.Input<number>;
        /**
         * Start time of the schedule. Must be at least five minutes in the future. Defaults to seven minutes in the future from the time the resource is created.
         */
        startTime?: pulumi.Input<string>;
        /**
         * The time offset in minutes for the start time.
         */
        startTimeOffsetMinutes?: pulumi.Input<number>;
        /**
         * The timezone of the start time. Defaults to `Etc/UTC`. For possible values see: <https://docs.microsoft.com/en-us/rest/api/maps/timezone/gettimezoneenumwindows>
         */
        timeZone?: pulumi.Input<string>;
    }
    interface SoftwareUpdateConfigurationScheduleMonthlyOccurrence {
        /**
         * Day of the occurrence. Must be one of `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, `Sunday`.
         */
        day: pulumi.Input<string>;
        /**
         * Occurrence of the week within the month. Must be between `1` and `4`. `-1` for last week within the month.
         */
        occurrence: pulumi.Input<number>;
    }
    interface SoftwareUpdateConfigurationTarget {
        /**
         * One or more `azureQuery` blocks as defined above.
         */
        azureQueries?: pulumi.Input<pulumi.Input<inputs.automation.SoftwareUpdateConfigurationTargetAzureQuery>[]>;
        /**
         * One or more `nonAzureQuery` blocks as defined above.
         */
        nonAzureQueries?: pulumi.Input<pulumi.Input<inputs.automation.SoftwareUpdateConfigurationTargetNonAzureQuery>[]>;
    }
    interface SoftwareUpdateConfigurationTargetAzureQuery {
        /**
         * Specifies a list of locations to scope the query to.
         */
        locations?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Subscription or Resource Group ARM Ids to query.
         */
        scopes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies how the specified tags to filter VMs. Possible values are `Any` and `All`.
         */
        tagFilter?: pulumi.Input<string>;
        /**
         * A mapping of tags used for query filter. One or more `tags` block as defined below.
         */
        tags?: pulumi.Input<pulumi.Input<inputs.automation.SoftwareUpdateConfigurationTargetAzureQueryTag>[]>;
    }
    interface SoftwareUpdateConfigurationTargetAzureQueryTag {
        /**
         * Specifies the name of the tag to filter.
         */
        tag: pulumi.Input<string>;
        /**
         * Specifies a list of values for this tag key.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SoftwareUpdateConfigurationTargetNonAzureQuery {
        /**
         * Specifies the Log Analytics save search name.
         */
        functionAlias?: pulumi.Input<string>;
        /**
         * The workspace id for Log Analytics in which the saved search in.
         */
        workspaceId?: pulumi.Input<string>;
    }
    interface SoftwareUpdateConfigurationWindows {
        /**
         * Specifies the list of update classification. Possible values are `Unclassified`, `Critical`, `Security`, `UpdateRollup`, `FeaturePack`, `ServicePack`, `Definition`, `Tools` and `Updates`.
         */
        classificationsIncludeds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of knowledge base numbers excluded.
         */
        excludedKnowledgeBaseNumbers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of knowledge base numbers included.
         */
        includedKnowledgeBaseNumbers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the reboot settings after software update, possible values are `IfRequired`, `Never`, `RebootOnly` and `Always`. Defaults to `IfRequired`.
         */
        reboot?: pulumi.Input<string>;
    }
    interface SourceControlSecurity {
        /**
         * The refresh token of specified rpeo.
         */
        refreshToken?: pulumi.Input<string>;
        /**
         * The access token of specified repo.
         */
        token: pulumi.Input<string>;
        /**
         * Specify the token type, possible values are `PersonalAccessToken` and `Oauth`.
         */
        tokenType: pulumi.Input<string>;
    }
}
export declare namespace avs {
    interface PrivateCloudCircuit {
        /**
         * The ID of the ExpressRoute Circuit.
         */
        expressRouteId?: pulumi.Input<string>;
        /**
         * The ID of the ExpressRoute Circuit private peering.
         */
        expressRoutePrivatePeeringId?: pulumi.Input<string>;
        /**
         * The CIDR of the primary subnet.
         */
        primarySubnetCidr?: pulumi.Input<string>;
        /**
         * The CIDR of the secondary subnet.
         */
        secondarySubnetCidr?: pulumi.Input<string>;
    }
    interface PrivateCloudManagementCluster {
        /**
         * A list of hosts in the management cluster.
         */
        hosts?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the management cluster.
         */
        id?: pulumi.Input<number>;
        /**
         * The size of the management cluster. This field can not updated with `internetConnectionEnabled` together.
         */
        size: pulumi.Input<number>;
    }
}
export declare namespace backup {
    interface PolicyFileShareBackup {
        /**
         * Sets the backup frequency. Possible values are `Daily` and `Hourly`.
         *
         * > **Note:** This argument is made available for consistency with VM backup policies and to allow for potential future support of weekly backups
         */
        frequency: pulumi.Input<string>;
        /**
         * A `hourly` block defined as below. This is required when `frequency` is set to `Hourly`.
         */
        hourly?: pulumi.Input<inputs.backup.PolicyFileShareBackupHourly>;
        /**
         * The time of day to perform the backup in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.)
         *
         * > **Note:** `time` is required when `frequency` is set to `Daily`.
         */
        time?: pulumi.Input<string>;
    }
    interface PolicyFileShareBackupHourly {
        /**
         * Specifies the interval at which backup needs to be triggered. Possible values are `4`, `6`, `8` and `12`.
         */
        interval: pulumi.Input<number>;
        /**
         * Specifies the start time of the hourly backup. The time format should be in 24-hour format. Times must be either on the hour or half hour (e.g. 12:00, 12:30, 13:00, etc.).
         */
        startTime: pulumi.Input<string>;
        /**
         * Species the duration of the backup window in hours. Details could be found [here](https://learn.microsoft.com/en-us/azure/backup/backup-azure-files-faq#what-does-the-duration-attribute-in-azure-files-backup-policy-signify-).
         */
        windowDuration: pulumi.Input<number>;
    }
    interface PolicyFileShareRetentionDaily {
        /**
         * The number of daily backups to keep. Must be between `1` and `200` (inclusive)
         */
        count: pulumi.Input<number>;
    }
    interface PolicyFileShareRetentionMonthly {
        /**
         * The number of monthly backups to keep. Must be between `1` and `120`
         */
        count: pulumi.Input<number>;
        /**
         * The days of the month to retain backups of. Must be between `1` and `31`.
         */
        days?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Including the last day of the month, default to `false`.
         *
         * > **Note:** Either `weekdays` and `weeks` or `days` and `includeLastDays` must be specified.
         */
        includeLastDays?: pulumi.Input<boolean>;
        /**
         * The weekday backups to retain . Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Must be one of `First`, `Second`, `Third`, `Fourth`, `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyFileShareRetentionWeekly {
        /**
         * The number of daily backups to keep. Must be between `1` and `200` (inclusive)
         */
        count: pulumi.Input<number>;
        /**
         * The weekday backups to retain. Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyFileShareRetentionYearly {
        /**
         * The number of yearly backups to keep. Must be between `1` and `10`
         */
        count: pulumi.Input<number>;
        /**
         * The days of the month to retain backups of. Must be between `1` and `31`.
         */
        days?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Including the last day of the month, default to `false`.
         *
         * > **Note:** Either `weekdays` and `weeks` or `days` and `includeLastDays` must be specified.
         */
        includeLastDays?: pulumi.Input<boolean>;
        /**
         * The months of the year to retain backups of. Must be one of `January`, `February`, `March`, `April`, `May`, `June`, `July`, `Augest`, `September`, `October`, `November` and `December`.
         */
        months: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weekday backups to retain . Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Must be one of `First`, `Second`, `Third`, `Fourth`, `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMBackup {
        /**
         * Sets the backup frequency. Possible values are `Hourly`, `Daily` and `Weekly`.
         */
        frequency: pulumi.Input<string>;
        /**
         * Duration of the backup window in hours. Possible values are between `4` and `24` This is used when `frequency` is `Hourly`.
         *
         * > **Note:** `hourDuration` must be multiplier of `hourInterval`
         */
        hourDuration?: pulumi.Input<number>;
        /**
         * Interval in hour at which backup is triggered. Possible values are `4`, `6`, `8` and `12`. This is used when `frequency` is `Hourly`.
         */
        hourInterval?: pulumi.Input<number>;
        /**
         * The time of day to perform the backup in 24hour format.
         */
        time: pulumi.Input<string>;
        /**
         * The days of the week to perform backups on. Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`. This is used when `frequency` is `Weekly`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMInstantRestoreResourceGroup {
        /**
         * The prefix for the `instantRestoreResourceGroup` name.
         */
        prefix: pulumi.Input<string>;
        /**
         * The suffix for the `instantRestoreResourceGroup` name.
         */
        suffix?: pulumi.Input<string>;
    }
    interface PolicyVMRetentionDaily {
        /**
         * The number of daily backups to keep. Must be between `7` and `9999`.
         *
         * > **Note:** Azure previously allows this field to be set to a minimum of 1 (day) - but for new resources/to update this value on existing Backup Policies - this value must now be at least 7 (days).
         */
        count: pulumi.Input<number>;
    }
    interface PolicyVMRetentionMonthly {
        /**
         * The number of monthly backups to keep. Must be between `1` and `9999`
         */
        count: pulumi.Input<number>;
        /**
         * The days of the month to retain backups of. Must be between `1` and `31`.
         */
        days?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Including the last day of the month, default to `false`.
         *
         * > **Note:** Either `weekdays` and `weeks` or `days` and `includeLastDays` must be specified.
         */
        includeLastDays?: pulumi.Input<boolean>;
        /**
         * The weekday backups to retain . Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Must be one of `First`, `Second`, `Third`, `Fourth`, `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMRetentionWeekly {
        /**
         * The number of weekly backups to keep. Must be between `1` and `9999`
         */
        count: pulumi.Input<number>;
        /**
         * The weekday backups to retain. Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMRetentionYearly {
        /**
         * The number of yearly backups to keep. Must be between `1` and `9999`
         */
        count: pulumi.Input<number>;
        /**
         * The days of the month to retain backups of. Must be between `1` and `31`.
         */
        days?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Including the last day of the month, default to `false`.
         *
         * > **Note:** Either `weekdays` and `weeks` or `days` and `includeLastDays` must be specified.
         */
        includeLastDays?: pulumi.Input<boolean>;
        /**
         * The months of the year to retain backups of. Must be one of `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`.
         */
        months: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weekday backups to retain . Must be one of `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Must be one of `First`, `Second`, `Third`, `Fourth`, `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMTieringPolicy {
        /**
         * An `archivedRestorePoint` block as defined below.
         */
        archivedRestorePoint: pulumi.Input<inputs.backup.PolicyVMTieringPolicyArchivedRestorePoint>;
    }
    interface PolicyVMTieringPolicyArchivedRestorePoint {
        /**
         * The number of days/weeks/months/years to retain backups in current tier before tiering.
         */
        duration?: pulumi.Input<number>;
        /**
         * The retention duration type. Possible values are `Days`, `Weeks`, `Months` and `Years`.
         */
        durationType?: pulumi.Input<string>;
        /**
         * The tiering mode to control automatic tiering of recovery points. Possible values are `TierAfter` and `TierRecommended`.
         */
        mode: pulumi.Input<string>;
    }
    interface PolicyVMWorkloadProtectionPolicy {
        /**
         * A `backup` block as defined below.
         */
        backup: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicyBackup>;
        /**
         * The type of the VM Workload Backup Policy. Possible values are `Differential`, `Full`, `Incremental` and `Log`.
         */
        policyType: pulumi.Input<string>;
        /**
         * A `retentionDaily` block as defined below.
         */
        retentionDaily?: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicyRetentionDaily>;
        /**
         * A `retentionMonthly` block as defined below.
         */
        retentionMonthly?: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicyRetentionMonthly>;
        /**
         * A `retentionWeekly` block as defined below.
         */
        retentionWeekly?: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicyRetentionWeekly>;
        /**
         * A `retentionYearly` block as defined below.
         */
        retentionYearly?: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicyRetentionYearly>;
        /**
         * A `simpleRetention` block as defined below.
         */
        simpleRetention?: pulumi.Input<inputs.backup.PolicyVMWorkloadProtectionPolicySimpleRetention>;
    }
    interface PolicyVMWorkloadProtectionPolicyBackup {
        /**
         * The backup frequency for the VM Workload Backup Policy. Possible values are `Daily` and `Weekly`.
         */
        frequency?: pulumi.Input<string>;
        /**
         * The backup frequency in minutes for the VM Workload Backup Policy. Possible values are `15`, `30`, `60`, `120`, `240`, `480`, `720` and `1440`.
         */
        frequencyInMinutes?: pulumi.Input<number>;
        /**
         * The time of day to perform the backup in 24hour format.
         */
        time?: pulumi.Input<string>;
        /**
         * The days of the week to perform backups on. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`. This is used when `frequency` is `Weekly`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMWorkloadProtectionPolicyRetentionDaily {
        /**
         * The number of daily backups to keep. Possible values are between `7` and `9999`.
         */
        count: pulumi.Input<number>;
    }
    interface PolicyVMWorkloadProtectionPolicyRetentionMonthly {
        /**
         * The number of monthly backups to keep. Must be between `1` and `1188`.
         */
        count: pulumi.Input<number>;
        /**
         * The retention schedule format type for monthly retention policy. Possible values are `Daily` and `Weekly`.
         */
        formatType: pulumi.Input<string>;
        /**
         * The monthday backups to retain. Possible values are between `0` and `28`.
         */
        monthdays?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * The weekday backups to retain. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMWorkloadProtectionPolicyRetentionWeekly {
        /**
         * The number of weekly backups to keep. Possible values are between `1` and `5163`.
         */
        count: pulumi.Input<number>;
        /**
         * The weekday backups to retain. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMWorkloadProtectionPolicyRetentionYearly {
        /**
         * The number of yearly backups to keep. Possible values are between `1` and `99`
         */
        count: pulumi.Input<number>;
        /**
         * The retention schedule format type for yearly retention policy. Possible values are `Daily` and `Weekly`.
         */
        formatType: pulumi.Input<string>;
        /**
         * The monthday backups to retain. Possible values are between `0` and `28`.
         */
        monthdays?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * The months of the year to retain backups of. Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`.
         */
        months: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weekday backups to retain. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` or `Saturday`.
         */
        weekdays?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The weeks of the month to retain backups of. Possible values are `First`, `Second`, `Third`, `Fourth`, `Last`.
         */
        weeks?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyVMWorkloadProtectionPolicySimpleRetention {
        /**
         * The count that is used to count retention duration with duration type `Days`. Possible values are between `7` and `35`.
         */
        count: pulumi.Input<number>;
    }
    interface PolicyVMWorkloadSettings {
        /**
         * The compression setting for the VM Workload Backup Policy. Defaults to `false`.
         */
        compressionEnabled?: pulumi.Input<boolean>;
        /**
         * The timezone for the VM Workload Backup Policy. [The possible values are defined here](https://jackstromberg.com/2017/01/list-of-time-zones-consumed-by-azure/).
         */
        timeZone: pulumi.Input<string>;
    }
}
export declare namespace batch {
    interface AccountEncryption {
        /**
         * The full URL path to the Azure key vault key id that should be used to encrypt data, as documented [here](https://docs.microsoft.com/azure/batch/batch-customer-managed-key). Both versioned and versionless keys are supported.
         */
        keyVaultKeyId: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Batch Account.
         *
         * > **NOTE:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Batch Account. Possible values are `SystemAssigned` or `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface AccountKeyVaultReference {
        /**
         * The Azure identifier of the Azure KeyVault to use.
         */
        id: pulumi.Input<string>;
        /**
         * The HTTPS URL of the Azure KeyVault to use.
         */
        url: pulumi.Input<string>;
    }
    interface AccountNetworkProfile {
        /**
         * An `accountAccess` block as defined below.
         */
        accountAccess?: pulumi.Input<inputs.batch.AccountNetworkProfileAccountAccess>;
        /**
         * A `nodeManagementAccess` block as defined below.
         *
         * > **NOTE:** At least one of `accountAccess` or `nodeManagementAccess` must be specified.
         */
        nodeManagementAccess?: pulumi.Input<inputs.batch.AccountNetworkProfileNodeManagementAccess>;
    }
    interface AccountNetworkProfileAccountAccess {
        /**
         * Specifies the default action for the account access. Possible values are `Allow` and `Deny`. Defaults to `Deny`.
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRule` blocks as defined below.
         */
        ipRules?: pulumi.Input<pulumi.Input<inputs.batch.AccountNetworkProfileAccountAccessIpRule>[]>;
    }
    interface AccountNetworkProfileAccountAccessIpRule {
        /**
         * Specifies the action of the ip rule. The only possible value is `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The CIDR block from which requests will match the rule.
         */
        ipRange: pulumi.Input<string>;
    }
    interface AccountNetworkProfileNodeManagementAccess {
        /**
         * Specifies the default action for the node management access. Possible values are `Allow` and `Deny`. Defaults to `Deny`.
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRule` blocks as defined below.
         */
        ipRules?: pulumi.Input<pulumi.Input<inputs.batch.AccountNetworkProfileNodeManagementAccessIpRule>[]>;
    }
    interface AccountNetworkProfileNodeManagementAccessIpRule {
        /**
         * Specifies the action of the ip rule. The only possible value is `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The CIDR block from which requests will match the rule.
         */
        ipRange: pulumi.Input<string>;
    }
    interface PoolAutoScale {
        /**
         * The interval to wait before evaluating if the pool needs to be scaled. Defaults to `PT15M`.
         */
        evaluationInterval?: pulumi.Input<string>;
        /**
         * The autoscale formula that needs to be used for scaling the Batch pool.
         */
        formula: pulumi.Input<string>;
    }
    interface PoolCertificate {
        /**
         * The ID of the Batch Pool.
         */
        id: pulumi.Input<string>;
        storeLocation: pulumi.Input<string>;
        storeName?: pulumi.Input<string>;
        visibilities?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PoolContainerConfiguration {
        /**
         * A list of container image names to use, as would be specified by `docker pull`. Changing this forces a new resource to be created.
         */
        containerImageNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `containerRegistries` blocks as defined below. Additional container registries from which container images can be pulled by the pool's VMs. Changing this forces a new resource to be created.
         */
        containerRegistries?: pulumi.Input<pulumi.Input<inputs.batch.PoolContainerConfigurationContainerRegistry>[]>;
        /**
         * The type of container configuration. Possible value is `DockerCompatible`.
         */
        type?: pulumi.Input<string>;
    }
    interface PoolContainerConfigurationContainerRegistry {
        /**
         * The password to log into the registry server. Changing this forces a new resource to be created.
         */
        password?: pulumi.Input<string>;
        /**
         * The container registry URL. Changing this forces a new resource to be created.
         */
        registryServer: pulumi.Input<string>;
        /**
         * The reference to the user assigned identity to use to access an Azure Container Registry instead of username and password. Changing this forces a new resource to be created.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
        /**
         * The user name to log into the registry server. Changing this forces a new resource to be created.
         */
        userName?: pulumi.Input<string>;
    }
    interface PoolDataDisk {
        /**
         * Values are: "none" - The caching mode for the disk is not enabled. "readOnly" - The caching mode for the disk is read only. "readWrite" - The caching mode for the disk is read and write. For information about the caching options see: <https://blogs.msdn.microsoft.com/windowsazurestorage/2012/06/27/exploring-windows-azure-drives-disks-and-images/>. Possible values are `None`, `ReadOnly` and `ReadWrite`. Defaults to `ReadOnly`.
         */
        caching?: pulumi.Input<string>;
        /**
         * The initial disk size in GB when creating new data disk.
         */
        diskSizeGb: pulumi.Input<number>;
        /**
         * The lun is used to uniquely identify each data disk. If attaching multiple disks, each should have a distinct lun. The value must be between 0 and 63, inclusive.
         */
        lun: pulumi.Input<number>;
        /**
         * The storage account type to be used for the data disk. Values are: Possible values are `Standard_LRS` - The data disk should use standard locally redundant storage. `Premium_LRS` - The data disk should use premium locally redundant storage. Defaults to `Standard_LRS`.
         */
        storageAccountType?: pulumi.Input<string>;
    }
    interface PoolDiskEncryption {
        /**
         * On Linux pool, only \"TemporaryDisk\" is supported; on Windows pool, \"OsDisk\" and \"TemporaryDisk\" must be specified.
         */
        diskEncryptionTarget: pulumi.Input<string>;
    }
    interface PoolExtension {
        /**
         * Indicates whether the extension should use a newer minor version if one is available at deployment time. Once deployed, however, the extension will not upgrade minor versions unless redeployed, even with this property set to true.
         */
        autoUpgradeMinorVersion?: pulumi.Input<boolean>;
        /**
         * Indicates whether the extension should be automatically upgraded by the platform if there is a newer version available. Supported values are `true` and `false`.
         *
         * > **Note:** When `automaticUpgradeEnabled` is set to `true`, the `typeHandlerVersion` is automatically updated by the Azure platform when a new version is available and any change in `typeHandlerVersion` should be manually ignored by user.
         */
        automaticUpgradeEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the virtual machine extension.
         */
        name: pulumi.Input<string>;
        /**
         * JSON formatted protected settings for the extension, the value should be encoded with `jsonencode` function. The extension can contain either `protectedSettings` or `provisionAfterExtensions` or no protected settings at all.
         */
        protectedSettings?: pulumi.Input<string>;
        /**
         * The collection of extension names. Collection of extension names after which this extension needs to be provisioned.
         */
        provisionAfterExtensions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the extension handler publisher.The name of the extension handler publisher.
         */
        publisher: pulumi.Input<string>;
        /**
         * JSON formatted public settings for the extension, the value should be encoded with `jsonencode` function.
         */
        settingsJson?: pulumi.Input<string>;
        /**
         * The type of the extensions.
         */
        type: pulumi.Input<string>;
        /**
         * The version of script handler.
         */
        typeHandlerVersion?: pulumi.Input<string>;
    }
    interface PoolFixedScale {
        /**
         * It determines what to do with a node and its running task(s) if the pool size is decreasing. Values are `Requeue`, `RetainedData`, `TaskCompletion` and `Terminate`.
         */
        nodeDeallocationMethod?: pulumi.Input<string>;
        /**
         * The timeout for resize operations. Defaults to `PT15M`.
         */
        resizeTimeout?: pulumi.Input<string>;
        /**
         * The number of nodes in the Batch pool. Defaults to `1`.
         */
        targetDedicatedNodes?: pulumi.Input<number>;
        /**
         * The number of low priority nodes in the Batch pool. Defaults to `0`.
         */
        targetLowPriorityNodes?: pulumi.Input<number>;
    }
    interface PoolIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Batch Account.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Batch Account. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface PoolMount {
        /**
         * A `azureBlobFileSystem` block defined as below.
         */
        azureBlobFileSystem?: pulumi.Input<inputs.batch.PoolMountAzureBlobFileSystem>;
        /**
         * A `azureFileShare` block defined as below.
         */
        azureFileShares?: pulumi.Input<pulumi.Input<inputs.batch.PoolMountAzureFileShare>[]>;
        /**
         * A `cifsMount` block defined as below.
         */
        cifsMounts?: pulumi.Input<pulumi.Input<inputs.batch.PoolMountCifsMount>[]>;
        /**
         * A `nfsMount` block defined as below.
         */
        nfsMounts?: pulumi.Input<pulumi.Input<inputs.batch.PoolMountNfsMount>[]>;
    }
    interface PoolMountAzureBlobFileSystem {
        /**
         * The Azure Storage Account key. This property is mutually exclusive with both `sasKey` and `identityId`; exactly one must be specified.
         */
        accountKey?: pulumi.Input<string>;
        /**
         * The Azure Storage Account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux.
         */
        blobfuseOptions?: pulumi.Input<string>;
        /**
         * The Azure Blob Storage Container name.
         */
        containerName: pulumi.Input<string>;
        /**
         * The ARM resource id of the user assigned identity. This property is mutually exclusive with both `accountKey` and `sasKey`; exactly one must be specified.
         */
        identityId?: pulumi.Input<string>;
        /**
         * The relative path on compute node where the file system will be mounted All file systems are mounted relative to the Batch mounts directory, accessible via the `AZ_BATCH_NODE_MOUNTS_DIR` environment variable.
         */
        relativeMountPath: pulumi.Input<string>;
        /**
         * The Azure Storage SAS token. This property is mutually exclusive with both `accountKey` and `identityId`; exactly one must be specified.
         */
        sasKey?: pulumi.Input<string>;
    }
    interface PoolMountAzureFileShare {
        /**
         * The Azure Storage Account key.
         */
        accountKey: pulumi.Input<string>;
        /**
         * The Azure Storage Account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * The Azure Files URL. This is of the form 'https://{account}.file.core.windows.net/'.
         */
        azureFileUrl: pulumi.Input<string>;
        /**
         * Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux.
         */
        mountOptions?: pulumi.Input<string>;
        /**
         * The relative path on compute node where the file system will be mounted All file systems are mounted relative to the Batch mounts directory, accessible via the `AZ_BATCH_NODE_MOUNTS_DIR` environment variable.
         */
        relativeMountPath: pulumi.Input<string>;
    }
    interface PoolMountCifsMount {
        /**
         * Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux.
         */
        mountOptions?: pulumi.Input<string>;
        /**
         * The password to use for authentication against the CIFS file system.
         */
        password: pulumi.Input<string>;
        /**
         * The relative path on compute node where the file system will be mounted All file systems are mounted relative to the Batch mounts directory, accessible via the `AZ_BATCH_NODE_MOUNTS_DIR` environment variable.
         */
        relativeMountPath: pulumi.Input<string>;
        /**
         * The URI of the file system to mount.
         */
        source: pulumi.Input<string>;
        /**
         * The user to use for authentication against the CIFS file system.
         */
        userName: pulumi.Input<string>;
    }
    interface PoolMountNfsMount {
        /**
         * Additional command line options to pass to the mount command. These are 'net use' options in Windows and 'mount' options in Linux.
         */
        mountOptions?: pulumi.Input<string>;
        /**
         * The relative path on compute node where the file system will be mounted All file systems are mounted relative to the Batch mounts directory, accessible via the `AZ_BATCH_NODE_MOUNTS_DIR` environment variable.
         */
        relativeMountPath: pulumi.Input<string>;
        /**
         * The URI of the file system to mount.
         */
        source: pulumi.Input<string>;
    }
    interface PoolNetworkConfiguration {
        /**
         * Whether to enable accelerated networking. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        acceleratedNetworkingEnabled?: pulumi.Input<boolean>;
        /**
         * The scope of dynamic vnet assignment. Allowed values: `none`, `job`. Changing this forces a new resource to be created. Defaults to `none`.
         */
        dynamicVnetAssignmentScope?: pulumi.Input<string>;
        /**
         * A list of `endpointConfiguration` blocks that can be used to address specific ports on an individual compute node externally as defined below. Set as documented in the inboundNatPools block below. Changing this forces a new resource to be created.
         */
        endpointConfigurations?: pulumi.Input<pulumi.Input<inputs.batch.PoolNetworkConfigurationEndpointConfiguration>[]>;
        /**
         * Type of public IP address provisioning. Supported values are `BatchManaged`, `UserManaged` and `NoPublicIPAddresses`.
         */
        publicAddressProvisioningType?: pulumi.Input<string>;
        /**
         * A list of public IP ids that will be allocated to nodes. Changing this forces a new resource to be created.
         */
        publicIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ARM resource identifier of the virtual network subnet which the compute nodes of the pool will join. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface PoolNetworkConfigurationEndpointConfiguration {
        /**
         * The port number on the compute node. Acceptable values are between `1` and `65535` except for `29876`, `29877` as these are reserved. Changing this forces a new resource to be created.
         */
        backendPort: pulumi.Input<number>;
        /**
         * The range of external ports that will be used to provide inbound access to the backendPort on individual compute nodes in the format of `1000-1100`. Acceptable values range between `1` and `65534` except ports from `50000` to `55000` which are reserved by the Batch service. All ranges within a pool must be distinct and cannot overlap. Values must be a range of at least `100` nodes. Changing this forces a new resource to be created.
         */
        frontendPortRange: pulumi.Input<string>;
        /**
         * The name of the endpoint. The name must be unique within a Batch pool, can contain letters, numbers, underscores, periods, and hyphens. Names must start with a letter or number, must end with a letter, number, or underscore, and cannot exceed 77 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * A list of `networkSecurityGroupRules` blocks as defined below that will be applied to the endpoint. The maximum number of rules that can be specified across all the endpoints on a Batch pool is `25`. If no network security group rules are specified, a default rule will be created to allow inbound access to the specified backendPort. Set as documented in the networkSecurityGroupRules block below. Changing this forces a new resource to be created.
         */
        networkSecurityGroupRules?: pulumi.Input<pulumi.Input<inputs.batch.PoolNetworkConfigurationEndpointConfigurationNetworkSecurityGroupRule>[]>;
        /**
         * The protocol of the endpoint. Acceptable values are `TCP` and `UDP`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
    }
    interface PoolNetworkConfigurationEndpointConfigurationNetworkSecurityGroupRule {
        /**
         * The action that should be taken for a specified IP address, subnet range or tag. Acceptable values are `Allow` and `Deny`. Changing this forces a new resource to be created.
         */
        access: pulumi.Input<string>;
        /**
         * The priority for this rule. The value must be at least `150`. Changing this forces a new resource to be created.
         */
        priority: pulumi.Input<number>;
        /**
         * The source address prefix or tag to match for the rule. Changing this forces a new resource to be created.
         */
        sourceAddressPrefix: pulumi.Input<string>;
        /**
         * The source port ranges to match for the rule. Valid values are `*` (for all ports 0 - 65535) or arrays of ports or port ranges (i.e. `100-200`). The ports should in the range of 0 to 65535 and the port ranges or ports can't overlap. If any other values are provided the request fails with HTTP status code 400. Default value will be `*`. Changing this forces a new resource to be created.
         */
        sourcePortRanges?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PoolNodePlacement {
        /**
         * The placement policy for allocating nodes in the pool. Values are: "Regional": All nodes in the pool will be allocated in the same region; "Zonal": Nodes in the pool will be spread across different zones with the best effort balancing. Defaults to `Regional`.
         */
        policy?: pulumi.Input<string>;
    }
    interface PoolSecurityProfile {
        /**
         * Whether to enable host encryption for the Virtual Machine or Virtual Machine Scale Set. This will enable the encryption for all the disks including Resource/Temp disk at host itself. Possible values are `true` and `false`. Changing this forces a new resource to be created.
         */
        hostEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable secure boot for the Virtual Machine or Virtual Machine Scale Set. Possible values are `true` and `false`. Changing this forces a new resource to be created.
         */
        secureBootEnabled?: pulumi.Input<boolean>;
        /**
         * The security type of the Virtual Machine. Possible values are `confidentialVM` and `trustedLaunch`. Changing this forces a new resource to be created.
         */
        securityType?: pulumi.Input<string>;
        /**
         * Whether to enable virtual trusted platform module (vTPM) for the Virtual Machine or Virtual Machine Scale Set. Possible values are `true` and `false`. Changing this forces a new resource to be created.
         *
         * > **Note:** `securityProfile` block can only be specified during creation and does not support updates.
         *
         * > **Note:** `securityType` must be specified to set UEFI related properties including `secureBootEnabled` and `vtpmEnabled`.
         */
        vtpmEnabled?: pulumi.Input<boolean>;
    }
    interface PoolStartTask {
        /**
         * The command line executed by the start task.
         */
        commandLine: pulumi.Input<string>;
        /**
         * A map of strings (key,value) that represents the environment variables to set in the start task.
         */
        commonEnvironmentProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * A `container` block is the settings for the container under which the start task runs as defined below. When this is specified, all directories recursively below the `AZ_BATCH_NODE_ROOT_DIR` (the root of Azure Batch directories on the node) are mapped into the container, all task environment variables are mapped into the container, and the task command line is executed in the container.
         */
        containers?: pulumi.Input<pulumi.Input<inputs.batch.PoolStartTaskContainer>[]>;
        /**
         * One or more `resourceFile` blocks that describe the files to be downloaded to a compute node as defined below.
         */
        resourceFiles?: pulumi.Input<pulumi.Input<inputs.batch.PoolStartTaskResourceFile>[]>;
        /**
         * The number of retry count. If this is set to `0`, the Batch service does not retry Tasks. If this is set to `-1`, the Batch service retries Batch Tasks without limit.
         */
        taskRetryMaximum?: pulumi.Input<number>;
        /**
         * A `userIdentity` block that describes the user identity under which the start task runs as defined below.
         */
        userIdentity: pulumi.Input<inputs.batch.PoolStartTaskUserIdentity>;
        /**
         * A flag that indicates if the Batch pool should wait for the start task to be completed. Default to `false`.
         */
        waitForSuccess?: pulumi.Input<boolean>;
    }
    interface PoolStartTaskContainer {
        /**
         * The image to use to create the container in which the task will run. This is the full image reference, as would be specified to "docker pull". If no tag is provided as part of the image name, the tag ":latest" is used as a default.
         */
        imageName: pulumi.Input<string>;
        /**
         * The `containerRegistries` block defined as below.
         */
        registries?: pulumi.Input<pulumi.Input<inputs.batch.PoolStartTaskContainerRegistry>[]>;
        /**
         * Additional options to the container create command. These additional options are supplied as arguments to the "docker create" command, in addition to those controlled by the Batch Service.
         */
        runOptions?: pulumi.Input<string>;
        /**
         * A flag to indicate where the container task working directory is. Possible values are `TaskWorkingDirectory` and `ContainerImageDefault`.
         */
        workingDirectory?: pulumi.Input<string>;
    }
    interface PoolStartTaskContainerRegistry {
        password?: pulumi.Input<string>;
        /**
         * The container registry URL. Changing this forces a new resource to be created.
         */
        registryServer: pulumi.Input<string>;
        /**
         * The User Assigned Identity to use for Container Registry access.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
        userName?: pulumi.Input<string>;
    }
    interface PoolStartTaskResourceFile {
        /**
         * The storage container name in the auto storage account.
         */
        autoStorageContainerName?: pulumi.Input<string>;
        /**
         * The blob prefix to use when downloading blobs from an Azure Storage container. Only the blobs whose names begin with the specified prefix will be downloaded. The property is valid only when `autoStorageContainerName` or `storageContainerUrl` is used. This prefix can be a partial filename or a subdirectory. If a prefix is not specified, all the files in the container will be downloaded.
         */
        blobPrefix?: pulumi.Input<string>;
        /**
         * The file permission mode represented as a string in octal format (e.g. `"0644"`). This property applies only to files being downloaded to Linux compute nodes. It will be ignored if it is specified for a `resourceFile` which will be downloaded to a Windows node. If this property is not specified for a Linux node, then a default value of 0770 is applied to the file.
         */
        fileMode?: pulumi.Input<string>;
        /**
         * The location on the compute node to which to download the file, relative to the task's working directory. If the `httpUrl` property is specified, the `filePath` is required and describes the path which the file will be downloaded to, including the filename. Otherwise, if the `autoStorageContainerName` or `storageContainerUrl` property is specified, `filePath` is optional and is the directory to download the files to. In the case where `filePath` is used as a directory, any directory structure already associated with the input data will be retained in full and appended to the specified filePath directory. The specified relative path cannot break out of the task's working directory (for example by using '..').
         */
        filePath?: pulumi.Input<string>;
        /**
         * The URL of the file to download. If the URL is Azure Blob Storage, it must be readable using anonymous access; that is, the Batch service does not present any credentials when downloading the blob. There are two ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read permissions on the blob, or set the ACL for the blob or its container to allow public access.
         */
        httpUrl?: pulumi.Input<string>;
        /**
         * The URL of the blob container within Azure Blob Storage. This URL must be readable and listable using anonymous access; that is, the Batch service does not present any credentials when downloading the blob. There are two ways to get such a URL for a blob in Azure storage: include a Shared Access Signature (SAS) granting read and list permissions on the blob, or set the ACL for the blob or its container to allow public access.
         */
        storageContainerUrl?: pulumi.Input<string>;
        /**
         * An identity reference from pool's user assigned managed identity list.
         *
         * > **Note:** Exactly one of `autoStorageContainerName`, `storageContainerUrl` and `autoUser` must be specified.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface PoolStartTaskUserIdentity {
        /**
         * A `autoUser` block that describes the user identity under which the start task runs as defined below.
         *
         * > **Note:** `userName` and `autoUser` blocks cannot be used both at the same time, but you need to define one or the other.
         */
        autoUser?: pulumi.Input<inputs.batch.PoolStartTaskUserIdentityAutoUser>;
        /**
         * The username to be used by the Batch pool start task.
         */
        userName?: pulumi.Input<string>;
    }
    interface PoolStartTaskUserIdentityAutoUser {
        /**
         * The elevation level of the user identity under which the start task runs. Possible values are `Admin` or `NonAdmin`. Defaults to `NonAdmin`.
         */
        elevationLevel?: pulumi.Input<string>;
        /**
         * The scope of the user identity under which the start task runs. Possible values are `Task` or `Pool`. Defaults to `Task`.
         */
        scope?: pulumi.Input<string>;
    }
    interface PoolStorageImageReference {
        /**
         * Specifies the ID of the Custom Image which the virtual machines should be created from. Changing this forces a new resource to be created. See [official documentation](https://docs.microsoft.com/azure/batch/batch-custom-images) for more details.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer?: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher?: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        sku?: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines. Changing this forces a new resource to be created.
         *
         * To provision a Custom Image, the following fields are applicable:
         */
        version?: pulumi.Input<string>;
    }
    interface PoolTaskSchedulingPolicy {
        /**
         * Supported values are "Pack" and "Spread". "Pack" means as many tasks as possible (taskSlotsPerNode) should be assigned to each node in the pool before any tasks are assigned to the next node in the pool. "Spread" means that tasks should be assigned evenly across all nodes in the pool.
         */
        nodeFillType?: pulumi.Input<string>;
    }
    interface PoolUserAccount {
        /**
         * The elevation level of the user account. "NonAdmin" - The auto user is a standard user without elevated access. "Admin" - The auto user is a user with elevated access and operates with full Administrator permissions. The default value is nonAdmin.
         */
        elevationLevel: pulumi.Input<string>;
        /**
         * The `linuxUserConfiguration` block defined below is a linux-specific user configuration for the user account. This property is ignored if specified on a Windows pool. If not specified, the user is created with the default options.
         */
        linuxUserConfigurations?: pulumi.Input<pulumi.Input<inputs.batch.PoolUserAccountLinuxUserConfiguration>[]>;
        /**
         * The name of the user account.
         */
        name: pulumi.Input<string>;
        /**
         * The password for the user account.
         */
        password: pulumi.Input<string>;
        /**
         * The `windowsUserConfiguration` block defined below is a windows-specific user configuration for the user account. This property can only be specified if the user is on a Windows pool. If not specified and on a Windows pool, the user is created with the default options.
         */
        windowsUserConfigurations?: pulumi.Input<pulumi.Input<inputs.batch.PoolUserAccountWindowsUserConfiguration>[]>;
    }
    interface PoolUserAccountLinuxUserConfiguration {
        /**
         * The user ID of the user account. The `uid` and `gid` properties must be specified together or not at all. If not specified the underlying operating system picks the uid.
         */
        gid?: pulumi.Input<number>;
        /**
         * The SSH private key for the user account. The private key must not be password protected. The private key is used to automatically configure asymmetric-key based authentication for SSH between nodes in a Linux pool when the pool's enableInterNodeCommunication property is true (it is ignored if enableInterNodeCommunication is false). It does this by placing the key pair into the user's .ssh directory. If not specified, password-less SSH is not configured between nodes (no modification of the user's .ssh directory is done).
         */
        sshPrivateKey?: pulumi.Input<string>;
        /**
         * The group ID for the user account. The `uid` and `gid` properties must be specified together or not at all. If not specified the underlying operating system picks the gid.
         */
        uid?: pulumi.Input<number>;
    }
    interface PoolUserAccountWindowsUserConfiguration {
        /**
         * Specifies login mode for the user. The default value for VirtualMachineConfiguration pools is interactive mode and for CloudServiceConfiguration pools is batch mode. Values supported are "Batch" and "Interactive".
         */
        loginMode: pulumi.Input<string>;
    }
    interface PoolWindow {
        /**
         * Whether automatic updates are enabled on the virtual machine. Defaults to `true`.
         */
        enableAutomaticUpdates?: pulumi.Input<boolean>;
    }
}
export declare namespace billing {
    interface AccountCostManagementExportExportDataOptions {
        /**
         * The time frame for pulling data for the query. If custom, then a specific time period must be provided. Possible values include: `WeekToDate`, `MonthToDate`, `BillingMonthToDate`, `TheLast7Days`, `TheLastMonth`, `TheLastBillingMonth`, `Custom`.
         */
        timeFrame: pulumi.Input<string>;
        /**
         * The type of the query. Possible values are `ActualCost`, `AmortizedCost` and `Usage`.
         */
        type: pulumi.Input<string>;
    }
    interface AccountCostManagementExportExportDataStorageLocation {
        /**
         * The Resource Manager ID of the container where exports will be uploaded. Changing this forces a new resource to be created.
         */
        containerId: pulumi.Input<string>;
        /**
         * The path of the directory where exports will be uploaded. Changing this forces a new resource to be created.
         *
         * > **Note:** The Resource Manager ID of a Storage Container is exposed via the `resourceManagerId` attribute of the `azure.storage.Container` resource.
         */
        rootFolderPath: pulumi.Input<string>;
    }
}
export declare namespace blueprint {
    interface AssignmentIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Blueprint.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Blueprint. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace bot {
    interface ChannelDirectLineSite {
        /**
         * Enables/Disables this site. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Is the endpoint parameters enabled for this site?
         */
        endpointParametersEnabled?: pulumi.Input<boolean>;
        /**
         * Enables additional security measures for this site, see [Enhanced Directline Authentication Features](https://blog.botframework.com/2018/09/25/enhanced-direct-line-authentication-features). Disabled by default.
         */
        enhancedAuthenticationEnabled?: pulumi.Input<boolean>;
        /**
         * Id for the site
         */
        id?: pulumi.Input<string>;
        /**
         * Primary key for accessing this site
         */
        key?: pulumi.Input<string>;
        /**
         * Secondary key for accessing this site
         */
        key2?: pulumi.Input<string>;
        /**
         * The name of the site
         */
        name: pulumi.Input<string>;
        /**
         * Is the storage site enabled for detailed logging? Defaults to `true`.
         */
        storageEnabled?: pulumi.Input<boolean>;
        /**
         * This field is required when `isSecureSiteEnabled` is enabled. Determines which origins can establish a Directline conversation for this site.
         */
        trustedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is the user upload enabled for this site? Defaults to `true`.
         */
        userUploadEnabled?: pulumi.Input<boolean>;
        /**
         * Enables v1 of the Directline protocol for this site. Defaults to `true`.
         */
        v1Allowed?: pulumi.Input<boolean>;
        /**
         * Enables v3 of the Directline protocol for this site. Defaults to `true`.
         */
        v3Allowed?: pulumi.Input<boolean>;
    }
    interface ChannelFacebookPage {
        /**
         * The Facebook Page Access Token for the Facebook Channel.
         */
        accessToken: pulumi.Input<string>;
        /**
         * The Facebook Page ID for the Facebook Channel.
         */
        id: pulumi.Input<string>;
    }
    interface ChannelLineLineChannel {
        /**
         * The access token which is used to call the Line Channel API.
         */
        accessToken: pulumi.Input<string>;
        /**
         * The secret which is used to access the Line Channel.
         */
        secret: pulumi.Input<string>;
    }
    interface ChannelWebChatSite {
        /**
         * Is the endpoint parameters enabled for this site?
         */
        endpointParametersEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the site.
         */
        name: pulumi.Input<string>;
        /**
         * Is the storage site enabled for detailed logging? Defaults to `true`.
         */
        storageEnabled?: pulumi.Input<boolean>;
        /**
         * Is the user upload enabled for this site? Defaults to `true`.
         */
        userUploadEnabled?: pulumi.Input<boolean>;
    }
}
export declare namespace cdn {
    interface EndpointCustomDomainCdnManagedHttps {
        /**
         * The type of HTTPS certificate. Possible values are `Shared` and `Dedicated`.
         */
        certificateType: pulumi.Input<string>;
        /**
         * The type of protocol. Possible values are `ServerNameIndication` and `IPBased`.
         */
        protocolType: pulumi.Input<string>;
        /**
         * The minimum TLS protocol version that is used for HTTPS. Possible values are `TLS10` (representing TLS 1.0/1.1), `TLS12` (representing TLS 1.2) and `None` (representing no minimums). Defaults to `TLS12`.
         *
         * > **Note:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
         */
        tlsVersion?: pulumi.Input<string>;
    }
    interface EndpointCustomDomainUserManagedHttps {
        /**
         * The ID of the Key Vault Secret that contains the HTTPS certificate.
         */
        keyVaultSecretId: pulumi.Input<string>;
        /**
         * The minimum TLS protocol version that is used for HTTPS. Possible values are `TLS10` (representing TLS 1.0/1.1), `TLS12` (representing TLS 1.2) and `None` (representing no minimums). Defaults to `TLS12`.
         *
         * > **Note:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
         */
        tlsVersion?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRule {
        /**
         * A `cacheExpirationAction` block as defined above.
         */
        cacheExpirationAction?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleCacheExpirationAction>;
        /**
         * A `cacheKeyQueryStringAction` block as defined above.
         */
        cacheKeyQueryStringAction?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleCacheKeyQueryStringAction>;
        /**
         * A `cookiesCondition` block as defined above.
         */
        cookiesConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleCookiesCondition>[]>;
        /**
         * A `deviceCondition` block as defined below.
         */
        deviceCondition?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleDeviceCondition>;
        /**
         * A `httpVersionCondition` block as defined below.
         */
        httpVersionConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleHttpVersionCondition>[]>;
        /**
         * A `modifyRequestHeaderAction` block as defined below.
         */
        modifyRequestHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleModifyRequestHeaderAction>[]>;
        /**
         * A `modifyResponseHeaderAction` block as defined below.
         */
        modifyResponseHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleModifyResponseHeaderAction>[]>;
        /**
         * The Name which should be used for this Delivery Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The order used for this rule. The order values should be sequential and begin at `1`.
         */
        order: pulumi.Input<number>;
        /**
         * A `postArgCondition` block as defined below.
         */
        postArgConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRulePostArgCondition>[]>;
        /**
         * A `queryStringCondition` block as defined below.
         */
        queryStringConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleQueryStringCondition>[]>;
        /**
         * A `remoteAddressCondition` block as defined below.
         */
        remoteAddressConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleRemoteAddressCondition>[]>;
        /**
         * A `requestBodyCondition` block as defined below.
         */
        requestBodyConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleRequestBodyCondition>[]>;
        /**
         * A `requestHeaderCondition` block as defined below.
         */
        requestHeaderConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleRequestHeaderCondition>[]>;
        /**
         * A `requestMethodCondition` block as defined below.
         */
        requestMethodCondition?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleRequestMethodCondition>;
        /**
         * A `requestSchemeCondition` block as defined below.
         */
        requestSchemeCondition?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleRequestSchemeCondition>;
        /**
         * A `requestUriCondition` block as defined below.
         */
        requestUriConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleRequestUriCondition>[]>;
        /**
         * A `urlFileExtensionCondition` block as defined below.
         */
        urlFileExtensionConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleUrlFileExtensionCondition>[]>;
        /**
         * A `urlFileNameCondition` block as defined below.
         */
        urlFileNameConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleUrlFileNameCondition>[]>;
        /**
         * A `urlPathCondition` block as defined below.
         */
        urlPathConditions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointDeliveryRuleUrlPathCondition>[]>;
        /**
         * A `urlRedirectAction` block as defined below.
         */
        urlRedirectAction?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleUrlRedirectAction>;
        /**
         * A `urlRewriteAction` block as defined below.
         */
        urlRewriteAction?: pulumi.Input<inputs.cdn.EndpointDeliveryRuleUrlRewriteAction>;
    }
    interface EndpointDeliveryRuleCacheExpirationAction {
        /**
         * The behavior of the cache. Valid values are `BypassCache`, `Override` and `SetIfMissing`.
         */
        behavior: pulumi.Input<string>;
        /**
         * Duration of the cache. Only allowed when `behavior` is set to `Override` or `SetIfMissing`. Format: `[d.]hh:mm:ss`
         */
        duration?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleCacheKeyQueryStringAction {
        /**
         * The behavior of the cache key for query strings. Valid values are `Exclude`, `ExcludeAll`, `Include` and `IncludeAll`.
         */
        behavior: pulumi.Input<string>;
        /**
         * Comma separated list of parameter values.
         */
        parameters?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleCookiesCondition {
        /**
         * List of values for the cookie. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * Name of the cookie.
         */
        selector: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleDeviceCondition {
        /**
         * Valid values are `Desktop` and `Mobile`.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleHttpVersionCondition {
        /**
         * Valid values are `0.9`, `1.0`, `1.1` and `2.0`.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleModifyRequestHeaderAction {
        /**
         * Action to be executed on a header value. Valid values are `Append`, `Delete` and `Overwrite`.
         */
        action: pulumi.Input<string>;
        /**
         * The header name.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the header. Only needed when `action` is set to `Append` or `overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleModifyResponseHeaderAction {
        /**
         * Action to be executed on a header value. Valid values are `Append`, `Delete` and `Overwrite`.
         */
        action: pulumi.Input<string>;
        /**
         * The header name.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the header. Only needed when `action` is set to `Append` or `overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRulePostArgCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * Name of the post arg.
         */
        selector: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleQueryStringCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleRemoteAddressCondition {
        /**
         * List of string values. For `GeoMatch` `operator` this should be a list of country codes (e.g. `US` or `DE`). List of IP address if `operator` equals to `IPMatch`. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `GeoMatch` and `IPMatch`.
         */
        operator: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleRequestBodyCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleRequestHeaderCondition {
        /**
         * List of header values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * Header name.
         */
        selector: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleRequestMethodCondition {
        /**
         * Valid values are `DELETE`, `GET`, `HEAD`, `OPTIONS`, `POST` and `PUT`.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleRequestSchemeCondition {
        /**
         * Valid values are `HTTP` and `HTTPS`.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleRequestUriCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleUrlFileExtensionCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleUrlFileNameCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleUrlPathCondition {
        /**
         * List of string values. This is required if `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Valid values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan`, `LessThanOrEqual`, `RegEx` and `Wildcard`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transforms. Valid values are `Lowercase` and `Uppercase`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointDeliveryRuleUrlRedirectAction {
        /**
         * Specifies the fragment part of the URL. This value must not start with a `#`.
         */
        fragment?: pulumi.Input<string>;
        /**
         * Specifies the hostname part of the URL.
         */
        hostname?: pulumi.Input<string>;
        /**
         * Specifies the path part of the URL. This value must begin with a `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * Specifies the protocol part of the URL. Valid values are `MatchRequest`, `Http` and `Https`. Defaults to `MatchRequest`.
         */
        protocol?: pulumi.Input<string>;
        /**
         * Specifies the query string part of the URL. This value must not start with a `?` or `&` and must be in `<key>=<value>` format separated by `&`.
         */
        queryString?: pulumi.Input<string>;
        /**
         * Type of the redirect. Valid values are `Found`, `Moved`, `PermanentRedirect` and `TemporaryRedirect`.
         */
        redirectType: pulumi.Input<string>;
    }
    interface EndpointDeliveryRuleUrlRewriteAction {
        /**
         * This value must start with a `/` and can't be longer than 260 characters.
         */
        destination: pulumi.Input<string>;
        /**
         * Whether preserve an unmatched path. Defaults to `true`.
         */
        preserveUnmatchedPath?: pulumi.Input<boolean>;
        /**
         * This value must start with a `/` and can't be longer than 260 characters.
         */
        sourcePattern: pulumi.Input<string>;
    }
    interface EndpointGeoFilter {
        /**
         * The Action of the Geo Filter. Possible values include `Allow` and `Block`.
         */
        action: pulumi.Input<string>;
        /**
         * A List of two letter country codes (e.g. `US`, `GB`) to be associated with this Geo Filter.
         */
        countryCodes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The relative path applicable to geo filter.
         */
        relativePath: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRule {
        /**
         * A `cacheExpirationAction` block as defined above.
         */
        cacheExpirationAction?: pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleCacheExpirationAction>;
        /**
         * A `cacheKeyQueryStringAction` block as defined above.
         */
        cacheKeyQueryStringAction?: pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleCacheKeyQueryStringAction>;
        /**
         * A `modifyRequestHeaderAction` block as defined below.
         */
        modifyRequestHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleModifyRequestHeaderAction>[]>;
        /**
         * A `modifyResponseHeaderAction` block as defined below.
         */
        modifyResponseHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleModifyResponseHeaderAction>[]>;
        /**
         * A `urlRedirectAction` block as defined below.
         */
        urlRedirectAction?: pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleUrlRedirectAction>;
        /**
         * A `urlRewriteAction` block as defined below.
         */
        urlRewriteAction?: pulumi.Input<inputs.cdn.EndpointGlobalDeliveryRuleUrlRewriteAction>;
    }
    interface EndpointGlobalDeliveryRuleCacheExpirationAction {
        /**
         * The behavior of the cache. Valid values are `BypassCache`, `Override` and `SetIfMissing`.
         */
        behavior: pulumi.Input<string>;
        /**
         * Duration of the cache. Only allowed when `behavior` is set to `Override` or `SetIfMissing`. Format: `[d.]hh:mm:ss`
         */
        duration?: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRuleCacheKeyQueryStringAction {
        /**
         * The behavior of the cache key for query strings. Valid values are `Exclude`, `ExcludeAll`, `Include` and `IncludeAll`.
         */
        behavior: pulumi.Input<string>;
        /**
         * Comma separated list of parameter values.
         */
        parameters?: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRuleModifyRequestHeaderAction {
        /**
         * Action to be executed on a header value. Valid values are `Append`, `Delete` and `Overwrite`.
         */
        action: pulumi.Input<string>;
        /**
         * The header name.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the header. Only needed when `action` is set to `Append` or `overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRuleModifyResponseHeaderAction {
        /**
         * Action to be executed on a header value. Valid values are `Append`, `Delete` and `Overwrite`.
         */
        action: pulumi.Input<string>;
        /**
         * The header name.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the header. Only needed when `action` is set to `Append` or `overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRuleUrlRedirectAction {
        /**
         * Specifies the fragment part of the URL. This value must not start with a `#`.
         */
        fragment?: pulumi.Input<string>;
        /**
         * Specifies the hostname part of the URL.
         */
        hostname?: pulumi.Input<string>;
        /**
         * Specifies the path part of the URL. This value must begin with a `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * Specifies the protocol part of the URL. Valid values are `MatchRequest`, `Http` and `Https`. Defaults to `MatchRequest`.
         */
        protocol?: pulumi.Input<string>;
        /**
         * Specifies the query string part of the URL. This value must not start with a `?` or `&` and must be in `<key>=<value>` format separated by `&`.
         */
        queryString?: pulumi.Input<string>;
        /**
         * Type of the redirect. Valid values are `Found`, `Moved`, `PermanentRedirect` and `TemporaryRedirect`.
         */
        redirectType: pulumi.Input<string>;
    }
    interface EndpointGlobalDeliveryRuleUrlRewriteAction {
        /**
         * This value must start with a `/` and can't be longer than 260 characters.
         */
        destination: pulumi.Input<string>;
        /**
         * Whether preserve an unmatched path. Defaults to `true`.
         */
        preserveUnmatchedPath?: pulumi.Input<boolean>;
        /**
         * This value must start with a `/` and can't be longer than 260 characters.
         */
        sourcePattern: pulumi.Input<string>;
    }
    interface EndpointOrigin {
        /**
         * A string that determines the hostname/IP address of the origin server. This string can be a domain name, Storage Account endpoint, Web App endpoint, IPv4 address or IPv6 address. Changing this forces a new resource to be created.
         */
        hostName: pulumi.Input<string>;
        /**
         * The HTTP port of the origin. Defaults to `80`. Changing this forces a new resource to be created.
         */
        httpPort?: pulumi.Input<number>;
        /**
         * The HTTPS port of the origin. Defaults to `443`. Changing this forces a new resource to be created.
         */
        httpsPort?: pulumi.Input<number>;
        /**
         * The name of the origin. This is an arbitrary value. However, this value needs to be unique under the endpoint. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface FrontdoorCustomDomainTls {
        /**
         * Resource ID of the Front Door Secret.
         */
        cdnFrontdoorSecretId?: pulumi.Input<string>;
        /**
         * Defines the source of the SSL certificate. Possible values include `CustomerCertificate` and `ManagedCertificate`. Defaults to `ManagedCertificate`.
         *
         * > **Note:** It may take up to 15 minutes for the Front Door Service to validate the state and Domain ownership of the Custom Domain.
         */
        certificateType?: pulumi.Input<string>;
        /**
         * TLS protocol version that will be used for Https. Possible values are `TLS12`. Defaults to `TLS12`.
         *
         * > **Note:** On March 1, 2025, support for Transport Layer Security (TLS) 1.0 and 1.1 will be retired for Azure Front Door, all connections to Azure Front Door must employ `TLS 1.2` or later, please see the product [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more details.
         *
         * @deprecated As of March 1, 2025, support for 'TLS10' will be retired from Azure Front Door, therefore the 'TLS10' property value will be removed in v5.0 of the provider.
         */
        minimumTlsVersion?: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyCustomRule {
        /**
         * The action to perform when the rule is matched. Possible values are `Allow`, `Block`, `Log`, `Redirect`, `JSChallenge`, or `CAPTCHA`.
         *
         * !> **Note:** Setting the `action` field to `JSChallenge` or `CAPTCHA` is currently in **PREVIEW**. Please see the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
         */
        action: pulumi.Input<string>;
        /**
         * Is the rule is enabled or disabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `matchCondition` block defined below. Can support up to `10` `matchCondition` blocks.
         */
        matchConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyCustomRuleMatchCondition>[]>;
        /**
         * Gets name of the resource that is unique within a policy. This name can be used to access the resource.
         */
        name: pulumi.Input<string>;
        /**
         * The priority of the rule. Rules with a lower value will be evaluated before rules with a higher value. Defaults to `1`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The rate limit duration in minutes. Defaults to `1`.
         */
        rateLimitDurationInMinutes?: pulumi.Input<number>;
        /**
         * The rate limit threshold. Defaults to `10`.
         */
        rateLimitThreshold?: pulumi.Input<number>;
        /**
         * The type of rule. Possible values are `MatchRule` or `RateLimitRule`.
         */
        type: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyCustomRuleMatchCondition {
        /**
         * Up to `600` possible values to match. Limit is in total across all `matchCondition` blocks and `matchValues` arguments. String value itself can be up to `256` characters in length.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The request variable to compare with. Possible values are `Cookies`, `PostArgs`, `QueryString`, `RemoteAddr`, `RequestBody`, `RequestHeader`, `RequestMethod`, `RequestUri`, or `SocketAddr`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Should the result of the condition be negated.
         */
        negationCondition?: pulumi.Input<boolean>;
        /**
         * Comparison type to use for matching with the variable value. Possible values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GeoMatch`, `GreaterThan`, `GreaterThanOrEqual`, `IPMatch`, `LessThan`, `LessThanOrEqual`, or `RegEx`.
         */
        operator: pulumi.Input<string>;
        /**
         * Match against a specific key if the `matchVariable` is `QueryString`, `PostArgs`, `RequestHeader`, or `Cookies`.
         */
        selector?: pulumi.Input<string>;
        /**
         * Up to `5` transforms to apply. Possible values are `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `URLDecode`, or `URLEncode`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorFirewallPolicyLogScrubbing {
        /**
         * Is log scrubbing enabled? Possible values are `true` or `false`. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `scrubbingRule` blocks as defined below.
         *
         * > **Note:** For more information on masking sensitive data in Azure Front Door please see the [product documentation](https://learn.microsoft.com/azure/web-application-firewall/afds/waf-sensitive-data-protection-configure-frontdoor).
         */
        scrubbingRules: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyLogScrubbingScrubbingRule>[]>;
    }
    interface FrontdoorFirewallPolicyLogScrubbingScrubbingRule {
        /**
         * Is this `scrubbingRule` enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The variable to be scrubbed from the logs. Possible values include `QueryStringArgNames`, `RequestBodyJsonArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`, `RequestIPAddress`, or `RequestUri`.
         *
         * > **Note:** `RequestIPAddress` and `RequestUri` must use the `EqualsAny` `operator`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * When the `matchVariable` is a collection, operate on the `selector` to specify which elements in the collection this `scrubbingRule` applies to. Possible values are `Equals` or `EqualsAny`. Defaults to `Equals`.
         */
        operator?: pulumi.Input<string>;
        /**
         * When the `matchVariable` is a collection, the `operator` is used to specify which elements in the collection this `scrubbingRule` applies to.
         *
         * > **Note:** The `selector` field cannot be set if the `operator` is set to `EqualsAny`.
         */
        selector?: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyManagedRule {
        /**
         * The action to perform for all default rule set rules when the managed rule is matched or when the anomaly score is 5 or greater depending on which version of the default rule set you are using. Possible values include `Allow`, `Log`, `Block`, or `Redirect`.
         */
        action: pulumi.Input<string>;
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyManagedRuleExclusion>[]>;
        /**
         * One or more `override` blocks as defined below.
         */
        overrides?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyManagedRuleOverride>[]>;
        /**
         * The name of the managed rule to use with this resource. Possible values include `DefaultRuleSet`, `Microsoft_DefaultRuleSet`, `BotProtection`, or `Microsoft_BotManagerRuleSet`.
         */
        type: pulumi.Input<string>;
        /**
         * The version of the managed rule to use with this resource. Possible values depends on which default rule set type you are using, for the `DefaultRuleSet` type the possible values include `1.0` or `preview-0.1`. For `Microsoft_DefaultRuleSet` the possible values include `1.1`, `2.0`, or `2.1`. For `BotProtection` the value must be `preview-0.1` and for `Microsoft_BotManagerRuleSet` the possible values include `1.0` and `1.1`.
         */
        version: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyManagedRuleExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`, `RequestBodyJsonArgNames`
         *
         * > **Note:** `RequestBodyJsonArgNames` is only available on Default Rule Set (DRS) 2.0 or later
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, or `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         *
         * > **Note:** `selector` must be set to `*` if `operator` is set to `EqualsAny`.
         */
        selector: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyManagedRuleOverride {
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyManagedRuleOverrideExclusion>[]>;
        /**
         * The managed rule group to override.
         */
        ruleGroupName: pulumi.Input<string>;
        /**
         * One or more `rule` blocks as defined below. If none are specified, all of the rules in the group will be disabled.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyManagedRuleOverrideRule>[]>;
    }
    interface FrontdoorFirewallPolicyManagedRuleOverrideExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`, `RequestBodyJsonArgNames`
         *
         * > **Note:** `RequestBodyJsonArgNames` is only available on Default Rule Set (DRS) 2.0 or later
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, or `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         *
         * > **Note:** `selector` must be set to `*` if `operator` is set to `EqualsAny`.
         */
        selector: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyManagedRuleOverrideRule {
        /**
         * The action to be applied when the managed rule matches or when the anomaly score is 5 or greater. Possible values are `Allow`, `CAPTCHA`, `Log`, `Block`, `Redirect`, `AnomalyScoring` and `JSChallenge`.
         *
         * > **Note:** Possible values for `DefaultRuleSet 1.1` and below are `Allow`, `Log`, `Block`, or `Redirect`.
         *
         * > **Note:** Possible values for `DefaultRuleSet 2.0` and above are `Log` or `AnomalyScoring`.
         *
         * > **Note:** Possible values for `Microsoft_BotManagerRuleSet` are `Allow`, `Log`, `Block`, `Redirect`, or `JSChallenge`.
         *
         * > **Note:** Please see the `DefaultRuleSet` [product documentation](https://learn.microsoft.com/azure/web-application-firewall/afds/waf-front-door-drs?tabs=drs20#anomaly-scoring-mode) or the `Microsoft_BotManagerRuleSet` [product documentation](https://learn.microsoft.com/azure/web-application-firewall/afds/afds-overview) for more information.
         *
         * !> **Note:** Setting the `action` field to `JSChallenge` is currently in **PREVIEW**. Please see the [Supplemental Terms of Use for Microsoft Azure Previews](https://azure.microsoft.com/support/legal/preview-supplemental-terms/) for legal terms that apply to Azure features that are in beta, preview, or otherwise not yet released into general availability.
         */
        action: pulumi.Input<string>;
        /**
         * Is the managed rule override enabled or disabled. Defaults to `false`
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorFirewallPolicyManagedRuleOverrideRuleExclusion>[]>;
        /**
         * Identifier for the managed rule.
         */
        ruleId: pulumi.Input<string>;
    }
    interface FrontdoorFirewallPolicyManagedRuleOverrideRuleExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`, `RequestBodyJsonArgNames`
         *
         * > **Note:** `RequestBodyJsonArgNames` is only available on Default Rule Set (DRS) 2.0 or later
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, or `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         *
         * > **Note:** `selector` must be set to `*` if `operator` is set to `EqualsAny`.
         */
        selector: pulumi.Input<string>;
    }
    interface FrontdoorOriginGroupHealthProbe {
        /**
         * Specifies the number of seconds between health probes. Possible values are between `1` and `255` seconds (inclusive).
         */
        intervalInSeconds: pulumi.Input<number>;
        /**
         * Specifies the path relative to the origin that is used to determine the health of the origin. Defaults to `/`.
         *
         * > **Note:** Health probes can only be disabled if there is a single enabled origin in a single enabled origin group. For more information about the `healthProbe` settings please see the [product documentation](https://docs.microsoft.com/azure/frontdoor/health-probes).
         */
        path?: pulumi.Input<string>;
        /**
         * Specifies the protocol to use for health probe. Possible values are `Http` and `Https`.
         */
        protocol: pulumi.Input<string>;
        /**
         * Specifies the type of health probe request that is made. Possible values are `GET` and `HEAD`. Defaults to `HEAD`.
         */
        requestType?: pulumi.Input<string>;
    }
    interface FrontdoorOriginGroupLoadBalancing {
        /**
         * Specifies the additional latency in milliseconds for probes to fall into the lowest latency bucket. Possible values are between `0` and `1000` milliseconds (inclusive). Defaults to `50`.
         */
        additionalLatencyInMilliseconds?: pulumi.Input<number>;
        /**
         * Specifies the number of samples to consider for load balancing decisions. Possible values are between `0` and `255` (inclusive). Defaults to `4`.
         */
        sampleSize?: pulumi.Input<number>;
        /**
         * Specifies the number of samples within the sample period that must succeed. Possible values are between `0` and `255` (inclusive). Defaults to `3`.
         */
        successfulSamplesRequired?: pulumi.Input<number>;
    }
    interface FrontdoorOriginPrivateLink {
        /**
         * Specifies the location where the Private Link resource should exist. Changing this forces a new resource to be created.
         */
        location: pulumi.Input<string>;
        /**
         * The ID of the Azure Resource to connect to via the Private Link.
         *
         * > **Note:** the `privateLinkTargetId` property must specify the Resource ID of the Private Link Service when using Load Balancer as an Origin.
         */
        privateLinkTargetId: pulumi.Input<string>;
        /**
         * Specifies the request message that will be submitted to the `privateLinkTargetId` when requesting the private link endpoint connection. Values must be between `1` and `140` characters in length. Defaults to `Access request for CDN FrontDoor Private Link Origin`.
         */
        requestMessage?: pulumi.Input<string>;
        /**
         * Specifies the type of target for this Private Link Endpoint. Possible values are `blob`, `blobSecondary`, `Gateway`, `managedEnvironments`, `sites`, `web` and `webSecondary`.
         *
         * > **Note:** `targetType` cannot be specified when using a Load Balancer as an Origin.
         */
        targetType?: pulumi.Input<string>;
    }
    interface FrontdoorProfileIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign. Required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of managed identity to assign. Possible values are `SystemAssigned`, `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface FrontdoorProfileLogScrubbingRule {
        /**
         * The variable to be scrubbed from the logs. Possible values are `QueryStringArgNames`, `RequestIPAddress`, and `RequestUri`.
         *
         * > **Note:** The `operator` field is implicitly set to `EqualsAny`, as it is the sole supported value, and is therefore not exposed as a configurable option in the provider schema.
         */
        matchVariable: pulumi.Input<string>;
    }
    interface FrontdoorRouteCache {
        /**
         * Is content compression enabled? Possible values are `true` or `false`. Defaults to `false`.
         *
         * > **Note:** Content won't be compressed when the requested content is smaller than `1 KB` or larger than `8 MB`(inclusive).
         */
        compressionEnabled?: pulumi.Input<boolean>;
        /**
         * A list of one or more `Content types` (formerly known as `MIME types`) to compress. Possible values include `application/eot`, `application/font`, `application/font-sfnt`, `application/javascript`, `application/json`, `application/opentype`, `application/otf`, `application/pkcs7-mime`, `application/truetype`, `application/ttf`, `application/vnd.ms-fontobject`, `application/xhtml+xml`, `application/xml`, `application/xml+rss`, `application/x-font-opentype`, `application/x-font-truetype`, `application/x-font-ttf`, `application/x-httpd-cgi`, `application/x-mpegurl`, `application/x-opentype`, `application/x-otf`, `application/x-perl`, `application/x-ttf`, `application/x-javascript`, `font/eot`, `font/ttf`, `font/otf`, `font/opentype`, `image/svg+xml`, `text/css`, `text/csv`, `text/html`, `text/javascript`, `text/js`, `text/plain`, `text/richtext`, `text/tab-separated-values`, `text/xml`, `text/x-script`, `text/x-component` or `text/x-java-source`.
         */
        contentTypesToCompresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Defines how the Front Door Route will cache requests that include query strings. Possible values include `IgnoreQueryString`, `IgnoreSpecifiedQueryStrings`, `IncludeSpecifiedQueryStrings` or `UseQueryString`. Defaults to `IgnoreQueryString`.
         *
         * > **Note:** The value of the `queryStringCachingBehavior` determines if the `queryStrings` field will be used as an include list or an ignore list.
         */
        queryStringCachingBehavior?: pulumi.Input<string>;
        /**
         * Query strings to include or ignore.
         */
        queryStrings?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleActions {
        /**
         * A `requestHeaderAction` block as defined below.
         */
        requestHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleActionsRequestHeaderAction>[]>;
        /**
         * A `responseHeaderAction` block as defined below.
         */
        responseHeaderActions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleActionsResponseHeaderAction>[]>;
        /**
         * A `routeConfigurationOverrideAction` block as defined below.
         */
        routeConfigurationOverrideAction?: pulumi.Input<inputs.cdn.FrontdoorRuleActionsRouteConfigurationOverrideAction>;
        /**
         * A `urlRedirectAction` block as defined below. You may **not** have a `urlRedirectAction` **and** a `urlRewriteAction` defined in the same `actions` block.
         */
        urlRedirectAction?: pulumi.Input<inputs.cdn.FrontdoorRuleActionsUrlRedirectAction>;
        /**
         * A `urlRewriteAction` block as defined below. You may **not** have a `urlRewriteAction` **and** a `urlRedirectAction` defined in the same `actions` block.
         */
        urlRewriteAction?: pulumi.Input<inputs.cdn.FrontdoorRuleActionsUrlRewriteAction>;
    }
    interface FrontdoorRuleActionsRequestHeaderAction {
        /**
         * The action to be taken on the specified `headerName`. Possible values include `Append`, `Overwrite` or `Delete`.
         *
         * > **Note:** `Append` causes the specified header to be added to the request with the specified value. If the header is already present, the value is appended to the existing header value using string concatenation. No delimiters are added. `Overwrite` causes specified header to be added to the request with the specified value. If the header is already present, the specified value overwrites the existing value. `Delete` causes the header to be deleted from the request.
         */
        headerAction: pulumi.Input<string>;
        /**
         * The name of the header to modify.
         */
        headerName: pulumi.Input<string>;
        /**
         * The value to append or overwrite.
         *
         * > **Note:** `value` is required if the `headerAction` is set to `Append` or `Overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface FrontdoorRuleActionsResponseHeaderAction {
        /**
         * The action to be taken on the specified `headerName`. Possible values include `Append`, `Overwrite` or `Delete`.
         *
         * > **Note:** `Append` causes the specified header to be added to the request with the specified value. If the header is already present, the value is appended to the existing header value using string concatenation. No delimiters are added. `Overwrite` causes specified header to be added to the request with the specified value. If the header is already present, the specified value overwrites the existing value. `Delete` causes the header to be deleted from the request.
         */
        headerAction: pulumi.Input<string>;
        /**
         * The name of the header to modify.
         */
        headerName: pulumi.Input<string>;
        /**
         * The value to append or overwrite.
         *
         * > **Note:** `value` is required if the `headerAction` is set to `Append` or `Overwrite`.
         */
        value?: pulumi.Input<string>;
    }
    interface FrontdoorRuleActionsRouteConfigurationOverrideAction {
        /**
         * `HonorOrigin` the Front Door will always honor origin response header directive. If the origin directive is missing, Front Door will cache contents anywhere from `1` to `3` days. `OverrideAlways` the TTL value returned from your Front Door Origin is overwritten with the value specified in the action. This behavior will only be applied if the response is cacheable. `OverrideIfOriginMissing` if no TTL value gets returned from your Front Door Origin, the rule sets the TTL to the value specified in the action. This behavior will only be applied if the response is cacheable. `Disabled` the Front Door will not cache the response contents, irrespective of Front Door Origin response directives. Possible values include `HonorOrigin`, `OverrideAlways`, `OverrideIfOriginMissing` or `Disabled`.
         */
        cacheBehavior?: pulumi.Input<string>;
        /**
         * When Cache behavior is set to `Override` or `SetIfMissing`, this field specifies the cache duration to use. The maximum duration is 366 days specified in the `d.HH:MM:SS` format(e.g. `365.23:59:59`). If the desired maximum cache duration is less than 1 day then the maximum cache duration should be specified in the `HH:MM:SS` format(e.g. `23:59:59`).
         */
        cacheDuration?: pulumi.Input<string>;
        /**
         * The Front Door Origin Group resource ID that the request should be routed to. This overrides the configuration specified in the Front Door Endpoint route.
         */
        cdnFrontdoorOriginGroupId?: pulumi.Input<string>;
        /**
         * Should the Front Door dynamically compress the content? Possible values include `true` or `false`.
         *
         * > **Note:** Content won't be compressed on AzureFrontDoor when requested content is smaller than `1 byte` or larger than `1 MB`.
         */
        compressionEnabled?: pulumi.Input<boolean>;
        /**
         * The forwarding protocol the request will be redirected as. This overrides the configuration specified in the route to be associated with. Possible values include `MatchRequest`, `HttpOnly` or `HttpsOnly`.
         *
         * > **Note:** If the `cdnFrontdoorOriginGroupId` is not defined you cannot set the `forwardingProtocol`.
         */
        forwardingProtocol?: pulumi.Input<string>;
        /**
         * `IncludeSpecifiedQueryStrings` query strings specified in the `queryStringParameters` field get included when the cache key gets generated. `UseQueryString` cache every unique URL, each unique URL will have its own cache key. `IgnoreSpecifiedQueryStrings` query strings specified in the `queryStringParameters` field get excluded when the cache key gets generated. `IgnoreQueryString` query strings aren't considered when the cache key gets generated. Possible values include `IgnoreQueryString`, `UseQueryString`, `IgnoreSpecifiedQueryStrings` or `IncludeSpecifiedQueryStrings`.
         */
        queryStringCachingBehavior?: pulumi.Input<string>;
        /**
         * A list of query string parameter names.
         *
         * > **Note:** `queryStringParameters` is a required field when the `queryStringCachingBehavior` is set to `IncludeSpecifiedQueryStrings` or `IgnoreSpecifiedQueryStrings`.
         */
        queryStringParameters?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleActionsUrlRedirectAction {
        /**
         * The fragment to use in the redirect. The value must be a string between `0` and `1024` characters in length, leave blank to preserve the incoming fragment. Defaults to `""`.
         */
        destinationFragment?: pulumi.Input<string>;
        /**
         * The host name you want the request to be redirected to. The value must be a string between `0` and `2048` characters in length, leave blank to preserve the incoming host.
         */
        destinationHostname: pulumi.Input<string>;
        /**
         * The path to use in the redirect. The value must be a string and include the leading `/`, leave blank to preserve the incoming path. Defaults to `""`.
         */
        destinationPath?: pulumi.Input<string>;
        /**
         * The query string used in the redirect URL. The value must be in the &lt;key>=&lt;value> or &lt;key>={`actionServerVariable`} format and must not include the leading `?`, leave blank to preserve the incoming query string. Maximum allowed length for this field is `2048` characters. Defaults to `""`.
         */
        queryString?: pulumi.Input<string>;
        /**
         * The protocol the request will be redirected as. Possible values include `MatchRequest`, `Http` or `Https`. Defaults to `MatchRequest`.
         */
        redirectProtocol?: pulumi.Input<string>;
        /**
         * The response type to return to the requestor. Possible values include `Moved`, `Found` , `TemporaryRedirect` or `PermanentRedirect`.
         */
        redirectType: pulumi.Input<string>;
    }
    interface FrontdoorRuleActionsUrlRewriteAction {
        /**
         * The destination path to use in the rewrite. The destination path overwrites the source pattern.
         */
        destination: pulumi.Input<string>;
        /**
         * Append the remaining path after the source pattern to the new destination path? Possible values `true` or `false`. Defaults to `false`.
         */
        preserveUnmatchedPath?: pulumi.Input<boolean>;
        /**
         * The source pattern in the URL path to replace. This uses prefix-based matching. For example, to match all URL paths use a forward slash `"/"` as the source pattern value.
         */
        sourcePattern: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditions {
        /**
         * A `clientPortCondition` block as defined below.
         */
        clientPortConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsClientPortCondition>[]>;
        /**
         * A `cookiesCondition` block as defined below.
         */
        cookiesConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsCookiesCondition>[]>;
        /**
         * A `hostNameCondition` block as defined below.
         */
        hostNameConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsHostNameCondition>[]>;
        /**
         * A `httpVersionCondition` block as defined below.
         */
        httpVersionConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsHttpVersionCondition>[]>;
        /**
         * A `isDeviceCondition` block as defined below.
         */
        isDeviceConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsIsDeviceCondition>[]>;
        /**
         * A `postArgsCondition` block as defined below.
         */
        postArgsConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsPostArgsCondition>[]>;
        /**
         * A `queryStringCondition` block as defined below.
         */
        queryStringConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsQueryStringCondition>[]>;
        /**
         * A `remoteAddressCondition` block as defined below.
         */
        remoteAddressConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRemoteAddressCondition>[]>;
        /**
         * A `requestBodyCondition` block as defined below.
         */
        requestBodyConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRequestBodyCondition>[]>;
        /**
         * A `requestHeaderCondition` block as defined below.
         */
        requestHeaderConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRequestHeaderCondition>[]>;
        /**
         * A `requestMethodCondition` block as defined below.
         */
        requestMethodConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRequestMethodCondition>[]>;
        /**
         * A `requestSchemeCondition` block as defined below.
         */
        requestSchemeConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRequestSchemeCondition>[]>;
        /**
         * A `requestUriCondition` block as defined below.
         */
        requestUriConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsRequestUriCondition>[]>;
        /**
         * A `serverPortCondition` block as defined below.
         */
        serverPortConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsServerPortCondition>[]>;
        /**
         * A `socketAddressCondition` block as defined below.
         */
        socketAddressConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsSocketAddressCondition>[]>;
        /**
         * A `sslProtocolCondition` block as defined below.
         */
        sslProtocolConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsSslProtocolCondition>[]>;
        /**
         * A `urlFileExtensionCondition` block as defined below.
         */
        urlFileExtensionConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsUrlFileExtensionCondition>[]>;
        /**
         * A `urlFilenameCondition` block as defined below.
         */
        urlFilenameConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsUrlFilenameCondition>[]>;
        /**
         * A `urlPathCondition` block as defined below.
         */
        urlPathConditions?: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorRuleConditionsUrlPathCondition>[]>;
    }
    interface FrontdoorRuleConditionsClientPortCondition {
        /**
         * One or more integer values(e.g. "1") representing the value of the client port to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsCookiesCondition {
        /**
         * A string value representing the name of the cookie.
         */
        cookieName: pulumi.Input<string>;
        /**
         * One or more string or integer values(e.g. "1") representing the value of the request header to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsHostNameCondition {
        /**
         * A list of one or more string values representing the value of the request hostname to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsHttpVersionCondition {
        /**
         * What HTTP version should this condition match? Possible values `2.0`, `1.1`, `1.0` or `0.9`.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Possible value `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsIsDeviceCondition {
        /**
         * Which device should this rule match on? Possible values `Mobile` or `Desktop`.
         */
        matchValues?: pulumi.Input<string>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Possible value `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsPostArgsCondition {
        /**
         * One or more string or integer values(e.g. "1") representing the value of the `POST` argument to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A string value representing the name of the `POST` argument.
         */
        postArgsName: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsQueryStringCondition {
        /**
         * One or more string or integer values(e.g. "1") representing the value of the query string to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsRemoteAddressCondition {
        /**
         * For the IP Match or IP Not Match operators: specify one or more IP address ranges. If multiple IP address ranges are specified, they're evaluated using `OR` logic. For the Geo Match or Geo Not Match operators: specify one or more locations using their country code.
         *
         * > **Note:** See the `Specifying IP Address Ranges` section below on how to correctly define the `matchValues` field.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * The type of the remote address to match. Possible values include `Any`, `GeoMatch` or `IPMatch`. Use the `negateCondition` to specify Not `GeoMatch` or Not `IPMatch`. Defaults to `IPMatch`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsRequestBodyCondition {
        /**
         * A list of one or more string or integer values(e.g. "1") representing the value of the request body text to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsRequestHeaderCondition {
        /**
         * A string value representing the name of the `POST` argument.
         */
        headerName: pulumi.Input<string>;
        /**
         * One or more string or integer values(e.g. "1") representing the value of the request header to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsRequestMethodCondition {
        /**
         * A list of one or more HTTP methods. Possible values include `GET`, `POST`, `PUT`, `DELETE`, `HEAD`, `OPTIONS` or `TRACE`. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Possible value `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsRequestSchemeCondition {
        /**
         * The requests protocol to match. Possible values include `HTTP` or `HTTPS`.
         */
        matchValues?: pulumi.Input<string>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Possible value `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsRequestUriCondition {
        /**
         * One or more string or integer values(e.g. "1") representing the value of the request URL to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsServerPortCondition {
        /**
         * A list of one or more integer values(e.g. "1") representing the value of the client port to match. Possible values include `80` or `443`. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsSocketAddressCondition {
        /**
         * Specify one or more IP address ranges. If multiple IP address ranges are specified, they're evaluated using `OR` logic.
         *
         * > **Note:** See the `Specifying IP Address Ranges` section below on how to correctly define the `matchValues` field.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * The type of match. The Possible values are `IpMatch` or `Any`. Defaults to `IPMatch`.
         *
         * > **Note:** If the value of the `operator` field is set to `IpMatch` then the `matchValues` field is also required.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsSslProtocolCondition {
        /**
         * A list of one or more HTTP methods. Possible values are `TLSv1`, `TLSv1.1` and `TLSv1.2` logic.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * Possible value `Equal`. Defaults to `Equal`.
         */
        operator?: pulumi.Input<string>;
    }
    interface FrontdoorRuleConditionsUrlFileExtensionCondition {
        /**
         * A list of one or more string or integer values(e.g. "1") representing the value of the request file extension to match. If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsUrlFilenameCondition {
        /**
         * A list of one or more string or integer values(e.g. "1") representing the value of the request file name to match. If multiple values are specified, they're evaluated using `OR` logic.
         *
         * > **Note:** The `matchValues` field is only optional if the `operator` is set to `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual` or `RegEx`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorRuleConditionsUrlPathCondition {
        /**
         * One or more string or integer values(e.g. "1") representing the value of the request path to match. Don't include the leading slash (`/`). If multiple values are specified, they're evaluated using `OR` logic.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If `true` operator becomes the opposite of its value. Possible values `true` or `false`. Defaults to `false`. Details can be found in the `Condition Operator List` below.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * A Conditional operator. Possible values include `Any`, `Equal`, `Contains`, `BeginsWith`, `EndsWith`, `LessThan`, `LessThanOrEqual`, `GreaterThan`, `GreaterThanOrEqual`, `RegEx` or `Wildcard`. Details can be found in the `Condition Operator List` below.
         */
        operator: pulumi.Input<string>;
        /**
         * A Conditional operator. Possible values include `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` or `UrlEncode`. Details can be found in the `Condition Transform List` below.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorSecretSecret {
        /**
         * A `customerCertificate` block as defined below. Changing this forces a new Front Door Secret to be created.
         */
        customerCertificates: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorSecretSecretCustomerCertificate>[]>;
    }
    interface FrontdoorSecretSecretCustomerCertificate {
        /**
         * The ID of the Key Vault certificate resource to use. Changing this forces a new Front Door Secret to be created.
         *
         * > **Note:** If you would like to use the **latest version** of the Key Vault Certificate use the Key Vault Certificates `versionlessId` attribute as the `keyVaultCertificateId` fields value(e.g. `keyVaultCertificateId = azurerm_key_vault_certificate.example.versionless_id`).
         */
        keyVaultCertificateId: pulumi.Input<string>;
        /**
         * One or more `subject alternative names` contained within the key vault certificate.
         */
        subjectAlternativeNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorSecurityPolicySecurityPolicies {
        /**
         * An `firewall` block as defined below.
         */
        firewall: pulumi.Input<inputs.cdn.FrontdoorSecurityPolicySecurityPoliciesFirewall>;
    }
    interface FrontdoorSecurityPolicySecurityPoliciesFirewall {
        /**
         * An `association` block as defined below.
         */
        association: pulumi.Input<inputs.cdn.FrontdoorSecurityPolicySecurityPoliciesFirewallAssociation>;
        /**
         * The Resource Id of the Front Door Firewall Policy that should be linked to this Front Door Security Policy. Changing this forces a new Front Door Security Policy to be created.
         */
        cdnFrontdoorFirewallPolicyId: pulumi.Input<string>;
    }
    interface FrontdoorSecurityPolicySecurityPoliciesFirewallAssociation {
        /**
         * One or more `domain` blocks as defined below.
         */
        domains: pulumi.Input<pulumi.Input<inputs.cdn.FrontdoorSecurityPolicySecurityPoliciesFirewallAssociationDomain>[]>;
        /**
         * The list of paths to match for this firewall policy. Possible value includes `/*`. Changing this forces a new Front Door Security Policy to be created.
         */
        patternsToMatch: pulumi.Input<string>;
    }
    interface FrontdoorSecurityPolicySecurityPoliciesFirewallAssociationDomain {
        /**
         * Is the Front Door Custom Domain/Endpoint activated?
         */
        active?: pulumi.Input<boolean>;
        /**
         * The Resource Id of the **Front Door Custom Domain** or **Front Door Endpoint** that should be bound to this Front Door Security Policy.
         */
        cdnFrontdoorDomainId: pulumi.Input<string>;
    }
}
export declare namespace chaosstudio {
    interface ExperimentIdentity {
        /**
         * A list of User Managed Identity IDs which should be assigned to the Policy Definition.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity which should be added to this Policy Definition. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ExperimentSelector {
        /**
         * A list of Chaos Studio Target IDs that should be part of this Selector.
         */
        chaosStudioTargetIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of this Selector.
         */
        name: pulumi.Input<string>;
    }
    interface ExperimentStep {
        /**
         * One or more `branch` blocks as defined above.
         */
        branches: pulumi.Input<pulumi.Input<inputs.chaosstudio.ExperimentStepBranch>[]>;
        /**
         * The name of the Step.
         */
        name: pulumi.Input<string>;
    }
    interface ExperimentStepBranch {
        /**
         * One or more `actions` blocks as defined above.
         */
        actions: pulumi.Input<pulumi.Input<inputs.chaosstudio.ExperimentStepBranchAction>[]>;
        /**
         * The name of the branch.
         */
        name: pulumi.Input<string>;
    }
    interface ExperimentStepBranchAction {
        /**
         * The type of action that should be added to the experiment. Possible values are `continuous`, `delay` and `discrete`.
         */
        actionType: pulumi.Input<string>;
        /**
         * An ISO8601 formatted string specifying the duration for a `delay` or `continuous` action.
         */
        duration?: pulumi.Input<string>;
        /**
         * A key-value map of additional parameters to configure the action. The values that are accepted by this depend on the `urn` i.e. the capability/fault that is applied. Possible parameter values can be found in this [documentation](https://learn.microsoft.com/azure/chaos-studio/chaos-studio-fault-library)
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of the Selector to which this action should apply to. This must be specified if the `actionType` is `continuous` or `discrete`.
         */
        selectorName?: pulumi.Input<string>;
        /**
         * The Unique Resource Name of the action, this value is provided by the `azure.chaosstudio.Capability` resource e.g. `azurerm_chaos_studio_capability.example.urn`. This must be specified if the `actionType` is `continuous` or `discrete`.
         */
        urn?: pulumi.Input<string>;
    }
}
export declare namespace cognitive {
    interface AIServicesCustomerManagedKey {
        /**
         * The Client ID of the User Assigned Identity that has access to the key. This property only needs to be specified when there are multiple identities attached to the Azure AI Service.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Key which should be used to encrypt the data in this AI Services Account. Exactly one of `keyVaultKeyId`, `managedHsmKeyId` must be specified.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * The ID of the managed HSM Key which should be used to encrypt the data in this AI Services Account. Exactly one of `keyVaultKeyId`, `managedHsmKeyId` must be specified.
         */
        managedHsmKeyId?: pulumi.Input<string>;
    }
    interface AIServicesIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this AI Services Account.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this AI Services Account. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned`
         */
        type: pulumi.Input<string>;
    }
    interface AIServicesNetworkAcls {
        /**
         * Whether to allow trusted Azure Services to access the service. Possible values are `None` and `AzureServices`. Defaults to `AzureServices`.
         */
        bypass?: pulumi.Input<string>;
        /**
         * The Default Action to use when no rules match from `ipRules` / `virtualNetworkRules`. Possible values are `Allow` and `Deny`.
         */
        defaultAction: pulumi.Input<string>;
        /**
         * One or more IP Addresses, or CIDR Blocks which should be able to access the AI Services Account.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `virtualNetworkRules` block as defined below.
         */
        virtualNetworkRules?: pulumi.Input<pulumi.Input<inputs.cognitive.AIServicesNetworkAclsVirtualNetworkRule>[]>;
    }
    interface AIServicesNetworkAclsVirtualNetworkRule {
        /**
         * Whether to ignore a missing Virtual Network Service Endpoint or not. Default to `false`.
         */
        ignoreMissingVnetServiceEndpoint?: pulumi.Input<boolean>;
        /**
         * The ID of the subnet which should be able to access this AI Services Account.
         */
        subnetId: pulumi.Input<string>;
    }
    interface AIServicesStorage {
        /**
         * The client ID of the Managed Identity associated with the Storage Account.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * The ID of the Storage Account.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface AccountCustomerManagedKey {
        /**
         * The Client ID of the User Assigned Identity that has access to the key. This property only needs to be specified when there're multiple identities attached to the Cognitive Account.
         *
         * > **Note:** When `projectManagementEnabled` is set to `true`, removing this block forces a new resource to be created.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Key which should be used to Encrypt the data in this Cognitive Account.
         */
        keyVaultKeyId: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Cognitive Account.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Cognitive Account. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface AccountNetworkAcls {
        /**
         * Whether to allow trusted Azure Services to access the service. Possible values are `None` and `AzureServices`.
         *
         * > **Note:** `bypass` can only be set when `kind` is set to `OpenAI`, `AIServices`, or `TextAnalytics`.
         */
        bypass?: pulumi.Input<string>;
        /**
         * The Default Action to use when no rules match from `ipRules` / `virtualNetworkRules`. Possible values are `Allow` and `Deny`.
         */
        defaultAction: pulumi.Input<string>;
        /**
         * One or more IP Addresses, or CIDR Blocks which should be able to access the Cognitive Account.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `virtualNetworkRules` block as defined below.
         */
        virtualNetworkRules?: pulumi.Input<pulumi.Input<inputs.cognitive.AccountNetworkAclsVirtualNetworkRule>[]>;
    }
    interface AccountNetworkAclsVirtualNetworkRule {
        /**
         * Whether ignore missing vnet service endpoint or not. Defaults to `false`.
         */
        ignoreMissingVnetServiceEndpoint?: pulumi.Input<boolean>;
        /**
         * The ID of the subnet which should be able to access this Cognitive Account.
         */
        subnetId: pulumi.Input<string>;
    }
    interface AccountNetworkInjection {
        /**
         * Specifies what features network injection applies to. The only possible value is `agent`.
         */
        scenario: pulumi.Input<string>;
        /**
         * The ID of the subnet which the Agent Client is injected into.
         *
         * > **Note:** The agent subnet must use an address space in the 172.* or 192.* ranges.
         */
        subnetId: pulumi.Input<string>;
    }
    interface AccountProjectIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Cognitive Account Project.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Cognitive Account Project. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface AccountRaiPolicyContentFilter {
        /**
         * Whether the filter should block content. Possible values are `true` or `false`.
         */
        blockEnabled: pulumi.Input<boolean>;
        /**
         * Whether the filter is enabled. Possible values are `true` or `false`.
         */
        filterEnabled: pulumi.Input<boolean>;
        /**
         * The name of the content filter.
         */
        name: pulumi.Input<string>;
        /**
         * The severity threshold for the filter. Possible values are `Low`, `Medium` or `High`.
         */
        severityThreshold: pulumi.Input<string>;
        /**
         * Content source to apply the content filter. Possible values are `Prompt` or `Completion`.
         */
        source: pulumi.Input<string>;
    }
    interface AccountStorage {
        /**
         * The client ID of the managed identity associated with the storage resource.
         *
         * > **Note:** Not all `kind` support a `storage` block. For example the `kind` `OpenAI` does not support it.
         */
        identityClientId?: pulumi.Input<string>;
        /**
         * Full resource id of a Microsoft.Storage resource.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface DeploymentModel {
        /**
         * The format of the Cognitive Services Account Deployment model. Changing this forces a new resource to be created.
         *
         * > **Note:** Possible values of `format` can be found by running the command `az cognitiveservices account list-models`. The available values may vary by region or due to quota limitations. These could include models from `AI21 Labs`, `Black Forest Labs`, `Cohere`, `Core42`, `DeepSeek`, `Meta`, `Microsoft`, `Mistral AI`, `OpenAI`, and `xAI`.
         */
        format: pulumi.Input<string>;
        /**
         * The name of the Cognitive Services Account Deployment model. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The version of Cognitive Services Account Deployment model. If `version` is not specified, the default version of the model at the time will be assigned.
         */
        version?: pulumi.Input<string>;
    }
    interface DeploymentSku {
        /**
         * Tokens-per-Minute (TPM). The unit of measure for this field is in the thousands of Tokens-per-Minute. Defaults to `1` which means that the limitation is `1000` tokens per minute. If the resources SKU supports scale in/out then the capacity field should be included in the resources' configuration. If the scale in/out is not supported by the resources SKU then this field can be safely omitted. For more information about TPM please see the [product documentation](https://learn.microsoft.com/azure/ai-services/openai/how-to/quota?tabs=rest).
         */
        capacity?: pulumi.Input<number>;
        /**
         * If the service has different generations of hardware, for the same SKU, then that can be captured here. Changing this forces a new resource to be created.
         */
        family?: pulumi.Input<string>;
        /**
         * The name of the SKU. Possible values include `Standard`, `DataZoneBatch`, `DataZoneStandard`, `DataZoneProvisionedManaged`, `GlobalBatch`, `GlobalProvisionedManaged`, `GlobalStandard`, and `ProvisionedManaged`. Changing this forces a new resource to be created.
         *
         * > **Note:** `DataZoneProvisionedManaged`, `GlobalProvisionedManaged`, and `ProvisionedManaged` are purchased on-demand at an hourly basis based on the number of deployed PTUs, with substantial term discount available via the purchase of Azure Reservations. Currently, this step cannot be completed using Terraform. For more details, please refer to the [provisioned throughput onboarding documentation](https://learn.microsoft.com/en-us/azure/ai-services/openai/how-to/provisioned-throughput-onboarding).
         */
        name: pulumi.Input<string>;
        /**
         * The SKU size. When the name field is the combination of tier and some other value, this would be the standalone code. Changing this forces a new resource to be created.
         */
        size?: pulumi.Input<string>;
        /**
         * Possible values are `Free`, `Basic`, `Standard`, `Premium`, `Enterprise`. This property is required only when multiple tiers are available with the SKU name. Changing this forces a new resource to be created.
         */
        tier?: pulumi.Input<string>;
    }
}
export declare namespace communication {
    interface EmailServiceDomainVerificationRecord {
        /**
         * (Optional) An `dkim2` block as defined below.
         */
        dkim2s?: pulumi.Input<pulumi.Input<inputs.communication.EmailServiceDomainVerificationRecordDkim2>[]>;
        /**
         * (Optional) An `dkim` block as defined below.
         */
        dkims?: pulumi.Input<pulumi.Input<inputs.communication.EmailServiceDomainVerificationRecordDkim>[]>;
        /**
         * (Optional) An `dmarc` block as defined below.
         */
        dmarcs?: pulumi.Input<pulumi.Input<inputs.communication.EmailServiceDomainVerificationRecordDmarc>[]>;
        /**
         * (Optional) An `domain` block as defined below.
         */
        domains?: pulumi.Input<pulumi.Input<inputs.communication.EmailServiceDomainVerificationRecordDomain>[]>;
        /**
         * (Optional) An `spf` block as defined below.
         */
        spfs?: pulumi.Input<pulumi.Input<inputs.communication.EmailServiceDomainVerificationRecordSpf>[]>;
    }
    interface EmailServiceDomainVerificationRecordDkim {
        /**
         * The name of the Email Communication Service resource. If `domainManagement` is `AzureManaged`, the name must be `AzureManagedDomain`. Changing this forces a new Email Communication Service to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Represents an expiry time in seconds to represent how long this entry can be cached by the resolver, default = 3600sec.
         */
        ttl?: pulumi.Input<number>;
        /**
         * Type of the DNS record. Example: TXT
         */
        type?: pulumi.Input<string>;
        /**
         * Value of the DNS record.
         */
        value?: pulumi.Input<string>;
    }
    interface EmailServiceDomainVerificationRecordDkim2 {
        /**
         * The name of the Email Communication Service resource. If `domainManagement` is `AzureManaged`, the name must be `AzureManagedDomain`. Changing this forces a new Email Communication Service to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Represents an expiry time in seconds to represent how long this entry can be cached by the resolver, default = 3600sec.
         */
        ttl?: pulumi.Input<number>;
        /**
         * Type of the DNS record. Example: TXT
         */
        type?: pulumi.Input<string>;
        /**
         * Value of the DNS record.
         */
        value?: pulumi.Input<string>;
    }
    interface EmailServiceDomainVerificationRecordDmarc {
        /**
         * The name of the Email Communication Service resource. If `domainManagement` is `AzureManaged`, the name must be `AzureManagedDomain`. Changing this forces a new Email Communication Service to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Represents an expiry time in seconds to represent how long this entry can be cached by the resolver, default = 3600sec.
         */
        ttl?: pulumi.Input<number>;
        /**
         * Type of the DNS record. Example: TXT
         */
        type?: pulumi.Input<string>;
        /**
         * Value of the DNS record.
         */
        value?: pulumi.Input<string>;
    }
    interface EmailServiceDomainVerificationRecordDomain {
        /**
         * The name of the Email Communication Service resource. If `domainManagement` is `AzureManaged`, the name must be `AzureManagedDomain`. Changing this forces a new Email Communication Service to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Represents an expiry time in seconds to represent how long this entry can be cached by the resolver, default = 3600sec.
         */
        ttl?: pulumi.Input<number>;
        /**
         * Type of the DNS record. Example: TXT
         */
        type?: pulumi.Input<string>;
        /**
         * Value of the DNS record.
         */
        value?: pulumi.Input<string>;
    }
    interface EmailServiceDomainVerificationRecordSpf {
        /**
         * The name of the Email Communication Service resource. If `domainManagement` is `AzureManaged`, the name must be `AzureManagedDomain`. Changing this forces a new Email Communication Service to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Represents an expiry time in seconds to represent how long this entry can be cached by the resolver, default = 3600sec.
         */
        ttl?: pulumi.Input<number>;
        /**
         * Type of the DNS record. Example: TXT
         */
        type?: pulumi.Input<string>;
        /**
         * Value of the DNS record.
         */
        value?: pulumi.Input<string>;
    }
}
export declare namespace compute {
    interface BastionHostIpConfiguration {
        /**
         * The name of the IP configuration. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Reference to a Public IP Address to associate with this Bastion Host. Changing this forces a new resource to be created.
         *
         * > **Note:** `publicIpAddressId` is required when `sku` is `Basic` or `Standard`. When `sku` is `Premium` and `publicIpAddressId` is omitted, the Bastion Host is deployed in Private-Only mode (`privateOnlyEnabled` will be `true`).
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * Reference to a subnet in which this Bastion Host has been created. Changing this forces a new resource to be created.
         *
         * > **Note:** The Subnet used for the Bastion Host must have the name `AzureBastionSubnet` and the subnet mask must be at least a `/26`.
         */
        subnetId: pulumi.Input<string>;
    }
    interface CapacityReservationSku {
        /**
         * Specifies the number of instances to be reserved. It must be greater than or equal to `0` and not exceed the quota in the subscription.
         */
        capacity: pulumi.Input<number>;
        /**
         * Name of the sku, such as `Standard_F2`. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface DiskEncryptionSetIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Disk Encryption Set.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The (Client) ID of the Service Principal.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The ID of the Tenant the Service Principal is assigned in.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of Managed Service Identity that is configured on this Disk Encryption Set. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface ExtensionProtectedSettingsFromKeyVault {
        /**
         * The URL to the Key Vault Secret which stores the protected settings.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface GalleryApplicationVersionManageAction {
        /**
         * The command to install the Gallery Application. Changing this forces a new resource to be created.
         */
        install: pulumi.Input<string>;
        /**
         * The command to remove the Gallery Application. Changing this forces a new resource to be created.
         */
        remove: pulumi.Input<string>;
        /**
         * The command to update the Gallery Application. Changing this forces a new resource to be created.
         */
        update?: pulumi.Input<string>;
    }
    interface GalleryApplicationVersionSource {
        /**
         * The Storage Blob URI of the default configuration. Changing this forces a new resource to be created.
         */
        defaultConfigurationLink?: pulumi.Input<string>;
        /**
         * The Storage Blob URI of the source application package. Changing this forces a new resource to be created.
         */
        mediaLink: pulumi.Input<string>;
    }
    interface GalleryApplicationVersionTargetRegion {
        /**
         * Specifies whether this Gallery Application Version should be excluded from the `latest` filter. If set to `true`, this Gallery Application Version won't be returned for the `latest` version. Defaults to `false`.
         */
        excludeFromLatest?: pulumi.Input<boolean>;
        /**
         * The Azure Region in which the Gallery Application Version exists.
         */
        name: pulumi.Input<string>;
        /**
         * The number of replicas of the Gallery Application Version to be created per region. Possible values are between `1` and `10`.
         */
        regionalReplicaCount: pulumi.Input<number>;
        /**
         * The storage account type for the Gallery Application Version. Possible values are `Standard_LRS`, `Premium_LRS` and `Standard_ZRS`. Defaults to `Standard_LRS`.
         */
        storageAccountType?: pulumi.Input<string>;
    }
    interface ImageDataDisk {
        /**
         * Specifies the URI in Azure storage of the blob that you want to use to create the image.
         */
        blobUri?: pulumi.Input<string>;
        /**
         * Specifies the caching mode as `ReadWrite`, `ReadOnly`, or `None`. Defaults to `None`.
         */
        caching?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this disk. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Specifies the logical unit number of the data disk.
         */
        lun?: pulumi.Input<number>;
        /**
         * Specifies the ID of the managed disk resource that you want to use to create the image. Changing this forces a new resource to be created.
         */
        managedDiskId?: pulumi.Input<string>;
        /**
         * Specifies the size of the image to be created. The target size can't be smaller than the source size.
         */
        sizeGb?: pulumi.Input<number>;
        /**
         * The type of Storage Disk to use. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
         */
        storageType: pulumi.Input<string>;
    }
    interface ImageOsDisk {
        /**
         * Specifies the URI in Azure storage of the blob that you want to use to create the image. Changing this forces a new resource to be created.
         */
        blobUri?: pulumi.Input<string>;
        /**
         * Specifies the caching mode as `ReadWrite`, `ReadOnly`, or `None`. The default is `None`.
         */
        caching?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this disk. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Specifies the ID of the managed disk resource that you want to use to create the image.
         */
        managedDiskId?: pulumi.Input<string>;
        /**
         * Specifies the state of the operating system contained in the blob. Currently, the only value is Generalized. Possible values are `Generalized` and `Specialized`.
         */
        osState?: pulumi.Input<string>;
        /**
         * Specifies the type of operating system contained in the virtual machine image. Possible values are: `Windows` or `Linux`.
         */
        osType?: pulumi.Input<string>;
        /**
         * Specifies the size of the image to be created. Changing this forces a new resource to be created.
         */
        sizeGb?: pulumi.Input<number>;
        /**
         * The type of Storage Disk to use. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
         */
        storageType: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineAdditionalCapabilities {
        /**
         * Whether to enable the hibernation capability or not.
         */
        hibernationEnabled?: pulumi.Input<boolean>;
        /**
         * Should the capacity to enable Data Disks of the `UltraSSD_LRS` storage account type be supported on this Virtual Machine? Defaults to `false`.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineAdminSshKey {
        /**
         * The Public Key which should be used for authentication, which needs to be in `ssh-rsa` format with at least 2048-bit or in `ssh-ed25519` format. Changing this forces a new resource to be created.
         */
        publicKey: pulumi.Input<string>;
        /**
         * The Username for which this Public SSH Key should be configured. Changing this forces a new resource to be created.
         *
         * > **NOTE:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be written to the authorized keys file.
         */
        username: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineBootDiagnostics {
        /**
         * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
         *
         * > **NOTE:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics
         */
        storageAccountUri?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineGalleryApplication {
        /**
         * Specifies whether the version will be automatically updated for the VM when a new Gallery Application version is available in PIR/SIG. Defaults to `false`.
         */
        automaticUpgradeEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the URI to an Azure Blob that will replace the default configuration for the package if provided.
         */
        configurationBlobUri?: pulumi.Input<string>;
        /**
         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2147483647`. Defaults to `0`.
         */
        order?: pulumi.Input<number>;
        /**
         * Specifies a passthrough value for more generic context. This field can be any valid `string` value.
         */
        tag?: pulumi.Input<string>;
        /**
         * Specifies whether any failure for any operation in the VmApplication will fail the deployment of the VM. Defaults to `false`.
         */
        treatFailureAsDeploymentFailureEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the Gallery Application Version resource ID.
         */
        versionId: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Linux Virtual Machine.
         *
         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Virtual Machine. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineOsDisk {
        /**
         * The Type of Caching which should be used for the Internal OS Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * A `diffDiskSettings` block as defined above. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `diffDiskSettings` can only be set when `caching` is set to `ReadOnly`. More information can be found [here](https://docs.microsoft.com/azure/virtual-machines/ephemeral-os-disks-deploy#vm-template-deployment). Additionally, this property cannot be set when an existing Managed Disk is used to create the Virtual Machine by setting `osManagedDiskId`.
         */
        diffDiskSettings?: pulumi.Input<inputs.compute.LinuxVirtualMachineOsDiskDiffDiskSettings>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`.
         *
         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine is sourced from.
         *
         * > **NOTE:** If specified this must be equal to or larger than the size of the Image the Virtual Machine is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The ID of the OS disk.
         */
        id?: pulumi.Input<string>;
        /**
         * The name which should be used for the Internal OS Disk. Changing this forces a new resource to be created.
         *
         * > **Note:** a value for `name` cannot be specified if/when the Virtual Machine is/has been created using an existing Managed Disk for the OS by setting `osManagedDiskId`.
         */
        name?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt this OS Disk when the Virtual Machine is a Confidential VM. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        secureVmDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Encryption Type when the Virtual Machine is a Confidential VM. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
         *
         * > **NOTE:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        securityEncryptionType?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this the Internal OS Disk. Possible values are `Standard_LRS`, `StandardSSD_LRS`, `Premium_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required unless using an existing OS Managed Disk by specifying `osManagedDiskId`.
         */
        storageAccountType?: pulumi.Input<string>;
        /**
         * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
         *
         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineOsDiskDiffDiskSettings {
        /**
         * Specifies the Ephemeral Disk Settings for the OS Disk. At this time the only possible value is `Local`. Changing this forces a new resource to be created.
         */
        option: pulumi.Input<string>;
        /**
         * Specifies where to store the Ephemeral Disk. Possible values are `CacheDisk`, `ResourceDisk` and `NvmeDisk`. Defaults to `CacheDisk`. Changing this forces a new resource to be created.
         *
         * > **Note:** `NvmeDisk` can only be used for v6 VMs in combination with a supported `sourceImageReference`. More information can be found [here](https://learn.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks)
         */
        placement?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineOsImageNotification {
        /**
         * Length of time a notification to be sent to the VM on the instance metadata server till the VM gets OS upgraded. The only possible value is `PT15M`. Defaults to `PT15M`.
         */
        timeout?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachinePlan {
        /**
         * Specifies the Name of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the Product of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the Publisher of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetAdditionalCapabilities {
        /**
         * Should the capacity to enable Data Disks of the `UltraSSD_LRS` storage account type be supported on this Virtual Machine Scale Set? Possible values are `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetAdminSshKey {
        /**
         * The Public Key which should be used for authentication, which needs to be in `ssh-rsa` format with at least 2048-bit or in `ssh-ed25519` format.
         */
        publicKey: pulumi.Input<string>;
        /**
         * The Username for which this Public SSH Key should be configured.
         *
         * > **Note:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be added/appended to the authorized keys file.
         */
        username: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetAutomaticInstanceRepair {
        /**
         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
         *
         * > **Note:** Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         *
         * > **Note:** If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
         */
        action?: pulumi.Input<string>;
        /**
         * Should the automatic instance repair be enabled on this Virtual Machine Scale Set?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
         *
         * > **Note:** Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         */
        gracePeriod?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetAutomaticOsUpgradePolicy {
        /**
         * Should automatic rollbacks be disabled?
         */
        disableAutomaticRollback: pulumi.Input<boolean>;
        /**
         * Should OS Upgrades automatically be applied to Scale Set instances in a rolling fashion when a newer version of the OS Image becomes available?
         */
        enableAutomaticOsUpgrade: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetBootDiagnostics {
        /**
         * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
         *
         * > **Note:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics.
         */
        storageAccountUri?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetDataDisk {
        /**
         * The type of Caching which should be used for this Data Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * The create option which should be used for this Data Disk. Possible values are `Empty` and `FromImage`. Defaults to `Empty`. (`FromImage` should only be used if the source image includes data disks).
         */
        createOption?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this Data Disk. Changing this forces a new resource to be created.
         *
         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         *
         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The size of the Data Disk which should be created.
         */
        diskSizeGb: pulumi.Input<number>;
        /**
         * The Logical Unit Number of the Data Disk, which must be unique within the Virtual Machine.
         */
        lun: pulumi.Input<number>;
        /**
         * The name of the Data Disk.
         */
        name?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this Data Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS` and `UltraSSD_LRS`.
         *
         * > **Note:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Specifies the Read-Write IOPS for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskIopsReadWrite?: pulumi.Input<number>;
        /**
         * Specifies the bandwidth in MB per second for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskMbpsReadWrite?: pulumi.Input<number>;
        /**
         * Should Write Accelerator be enabled for this Data Disk? Defaults to `false`.
         *
         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetExtension {
        /**
         * Should the latest version of the Extension be used at Deployment Time, if one is available? This won't auto-update the extension on existing installation. Defaults to `true`.
         */
        autoUpgradeMinorVersion?: pulumi.Input<boolean>;
        /**
         * Should the Extension be automatically updated whenever the Publisher releases a new version of this VM Extension?
         */
        automaticUpgradeEnabled?: pulumi.Input<boolean>;
        /**
         * A value which, when different to the previous value can be used to force-run the Extension even if the Extension Configuration hasn't changed.
         */
        forceUpdateTag?: pulumi.Input<string>;
        /**
         * The name for the Virtual Machine Scale Set Extension.
         */
        name: pulumi.Input<string>;
        /**
         * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
         *
         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
         */
        protectedSettings?: pulumi.Input<string>;
        /**
         * A `protectedSettingsFromKeyVault` block as defined below.
         *
         * > **Note:** `protectedSettingsFromKeyVault` cannot be used with `protectedSettings`
         */
        protectedSettingsFromKeyVault?: pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault>;
        /**
         * An ordered list of Extension names which this should be provisioned after.
         */
        provisionAfterExtensions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the Publisher of the Extension.
         */
        publisher: pulumi.Input<string>;
        /**
         * A JSON String which specifies Settings for the Extension.
         *
         * > **Note:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
         */
        settings?: pulumi.Input<string>;
        /**
         * Specifies the Type of the Extension.
         */
        type: pulumi.Input<string>;
        /**
         * Specifies the version of the extension to use, available versions can be found using the Azure CLI.
         */
        typeHandlerVersion: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault {
        /**
         * The URL to the Key Vault Secret which stores the protected settings.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetGalleryApplication {
        /**
         * Specifies the URI to an Azure Blob that will replace the default configuration for the package if provided. Changing this forces a new resource to be created.
         */
        configurationBlobUri?: pulumi.Input<string>;
        /**
         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2147483647`. Defaults to `0`. Changing this forces a new resource to be created.
         */
        order?: pulumi.Input<number>;
        /**
         * Specifies a passthrough value for more generic context. This field can be any valid `string` value. Changing this forces a new resource to be created.
         */
        tag?: pulumi.Input<string>;
        /**
         * Specifies the Gallery Application Version resource ID. Changing this forces a new resource to be created.
         */
        versionId: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Linux Virtual Machine Scale Set.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Linux Virtual Machine Scale Set. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetNetworkInterface {
        /**
         * Specifies the auxiliary mode used to enable network high-performance feature on Network Virtual Appliances (NVAs). This feature offers competitive performance in Connections Per Second (CPS) optimization, along with improvements to handling large amounts of simultaneous connections. Possible values are `AcceleratedConnections` and `Floating`.
         *
         * > **Note:** `auxiliaryMode` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliaryMode?: pulumi.Input<string>;
        /**
         * Specifies the SKU used for the network high-performance feature on Network Virtual Appliances (NVAs). Possible values are `A1`, `A2`, `A4` and `A8`.
         *
         * > **Note:** `auxiliarySku` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliarySku?: pulumi.Input<string>;
        /**
         * A list of IP Addresses of DNS Servers which should be assigned to the Network Interface.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Does this Network Interface support Accelerated Networking? Defaults to `false`.
         */
        enableAcceleratedNetworking?: pulumi.Input<boolean>;
        /**
         * Does this Network Interface support IP Forwarding? Defaults to `false`.
         */
        enableIpForwarding?: pulumi.Input<boolean>;
        /**
         * One or more `ipConfiguration` blocks as defined above.
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetNetworkInterfaceIpConfiguration>[]>;
        /**
         * The Name which should be used for this Network Interface. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of a Network Security Group which should be assigned to this Network Interface.
         */
        networkSecurityGroupId?: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration?
         *
         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
         */
        primary?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetNetworkInterfaceIpConfiguration {
        /**
         * A list of Backend Address Pools ID's from a Application Gateway which this Virtual Machine Scale Set should be connected to.
         */
        applicationGatewayBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Application Security Group ID's which this Virtual Machine Scale Set should be connected to.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Backend Address Pools ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
         *
         * > **Note:** When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
         *
         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of NAT Rule ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
         *
         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerInboundNatRulesIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Name which should be used for this IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration for this Network Interface? Defaults to `false`.
         *
         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * A `publicIpAddress` block as defined below.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress>[]>;
        /**
         * The ID of the Subnet which this IP Configuration should be connected to.
         *
         * > **Note:** `subnetId` is required if `version` is set to `IPv4`.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this IP Configuration. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`.
         */
        version?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress {
        /**
         * The Prefix which should be used for the Domain Name Label for each Virtual Machine Instance. Azure concatenates the Domain Name Label and Virtual Machine Index to create a unique Domain Name Label for each Virtual Machine.
         */
        domainNameLabel?: pulumi.Input<string>;
        /**
         * The Idle Timeout in Minutes for the Public IP Address. Possible values are in the range `4` to `32`.
         */
        idleTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * One or more `ipTag` blocks as defined above. Changing this forces a new resource to be created.
         */
        ipTags?: pulumi.Input<pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag>[]>;
        /**
         * The Name of the Public IP Address Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the Public IP Address Prefix from where Public IP Addresses should be allocated. Changing this forces a new resource to be created.
         *
         * > **Note:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
         */
        publicIpPrefixId?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this public IP address. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`. Changing this forces a new resource to be created.
         */
        version?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag {
        /**
         * The IP Tag associated with the Public IP, such as `SQL` or `Storage`. Changing this forces a new resource to be created.
         */
        tag: pulumi.Input<string>;
        /**
         * The Type of IP Tag, such as `FirstPartyUsage`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetOsDisk {
        /**
         * The Type of Caching which should be used for the Internal OS Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * A `diffDiskSettings` block as defined above. Changing this forces a new resource to be created.
         */
        diffDiskSettings?: pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetOsDiskDiffDiskSettings>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         *
         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine Scale Set is sourced from.
         *
         * > **Note:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt the OS Disk when the Virtual Machine Scale Set is Confidential VMSS. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **Note:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        secureVmDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Encryption Type when the Virtual Machine Scale Set is Confidential VMSS. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
         *
         * > **Note:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
         *
         * > **Note:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        securityEncryptionType?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this the Internal OS Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
         *
         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetOsDiskDiffDiskSettings {
        /**
         * Specifies the Ephemeral Disk Settings for the OS Disk. At this time the only possible value is `Local`. Changing this forces a new resource to be created.
         */
        option: pulumi.Input<string>;
        /**
         * Specifies where to store the Ephemeral Disk. Possible values are `CacheDisk` and `ResourceDisk`. Defaults to `CacheDisk`. Changing this forces a new resource to be created.
         */
        placement?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetPlan {
        /**
         * Specifies the name of the image from the marketplace. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the image from the marketplace. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetRollingUpgradePolicy {
        /**
         * Should the Virtual Machine Scale Set ignore the Azure Zone boundaries when constructing upgrade batches? Possible values are `true` or `false`.
         */
        crossZoneUpgradesEnabled?: pulumi.Input<boolean>;
        /**
         * The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability.
         */
        maxBatchInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch.
         */
        maxUnhealthyInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts.
         */
        maxUnhealthyUpgradedInstancePercent: pulumi.Input<number>;
        /**
         * Create new virtual machines to upgrade the scale set, rather than updating the existing virtual machines. Existing virtual machines will be deleted once the new virtual machines are created for each batch. Possible values are `true` or `false`.
         *
         * > **Note:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
         */
        maximumSurgeInstancesEnabled?: pulumi.Input<boolean>;
        /**
         * The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format.
         */
        pauseTimeBetweenBatches: pulumi.Input<string>;
        /**
         * Upgrade all unhealthy instances in a scale set before any healthy instances. Possible values are `true` or `false`.
         */
        prioritizeUnhealthyInstancesEnabled?: pulumi.Input<boolean>;
    }
    interface LinuxVirtualMachineScaleSetScaleIn {
        /**
         * Should the virtual machines chosen for removal be force deleted when the virtual machine scale set is being scaled-in? Possible values are `true` or `false`. Defaults to `false`.
         */
        forceDeletionEnabled?: pulumi.Input<boolean>;
        /**
         * The scale-in policy rule that decides which virtual machines are chosen for removal when a Virtual Machine Scale Set is scaled in. Possible values for the scale-in policy rules are `Default`, `NewestVM` and `OldestVM`, defaults to `Default`. For more information about scale in policy, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-scale-in-policy).
         */
        rule?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetSecret {
        /**
         * One or more `certificate` blocks as defined above.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.LinuxVirtualMachineScaleSetSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetSecretCertificate {
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         *
         * > **Note:** The certificate must have been uploaded/created in PFX format, PEM certificates are not currently supported by Azure.
         */
        url: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetSourceImageReference {
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines.
         */
        version: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetSpotRestore {
        /**
         * Should the Spot-Try-Restore feature be enabled? The Spot-Try-Restore feature will attempt to automatically restore the evicted Spot Virtual Machine Scale Set VM instances opportunistically based on capacity availability and pricing constraints. Possible values are `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The length of time that the Virtual Machine Scale Set should attempt to restore the Spot VM instances which have been evicted. The time duration should be between `15` minutes and `120` minutes (inclusive). The time duration should be specified in the ISO 8601 format. Defaults to `PT1H`. Changing this forces a new resource to be created.
         */
        timeout?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineScaleSetTerminationNotification {
        /**
         * Should the termination notification be enabled on this Virtual Machine Scale Set?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Length of time (in minutes, between 5 and 15) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
         *
         * > **Note:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
         */
        timeout?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineSecret {
        /**
         * One or more `certificate` blocks as defined above.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.LinuxVirtualMachineSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineSecretCertificate {
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        url: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineSourceImageReference {
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineTerminationNotification {
        /**
         * Should the termination notification be enabled on this Virtual Machine?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Length of time (in minutes, between `5` and `15`) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
         *
         * > **NOTE:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
         */
        timeout?: pulumi.Input<string>;
    }
    interface ManagedDiskEncryptionSettings {
        /**
         * A `diskEncryptionKey` block as defined above.
         */
        diskEncryptionKey: pulumi.Input<inputs.compute.ManagedDiskEncryptionSettingsDiskEncryptionKey>;
        /**
         * A `keyEncryptionKey` block as defined below.
         */
        keyEncryptionKey?: pulumi.Input<inputs.compute.ManagedDiskEncryptionSettingsKeyEncryptionKey>;
    }
    interface ManagedDiskEncryptionSettingsDiskEncryptionKey {
        /**
         * The URL to the Key Vault Secret used as the Disk Encryption Key. This can be found as `id` on the `azure.keyvault.Secret` resource.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface ManagedDiskEncryptionSettingsKeyEncryptionKey {
        /**
         * The URL to the Key Vault Key used as the Key Encryption Key. This can be found as `id` on the `azure.keyvault.Key` resource.
         */
        keyUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetAdditionalCapabilities {
        /**
         * Should the capacity to enable Data Disks of the `UltraSSD_LRS` storage account type be supported on this Virtual Machine Scale Set? Defaults to `false`. Changing this forces a new resource to be created.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
    }
    interface OrchestratedVirtualMachineScaleSetAutomaticInstanceRepair {
        /**
         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
         *
         * > **Note:** Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         *
         * > **Note:** If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
         */
        action?: pulumi.Input<string>;
        /**
         * Should the automatic instance repair be enabled on this Virtual Machine Scale Set? Possible values are `true` and `false`.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
         *
         * > **Note:** Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         */
        gracePeriod?: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetBootDiagnostics {
        /**
         * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor. By including a `bootDiagnostics` block without passing the `storageAccountUri` field will cause the API to utilize a Managed Storage Account to store the Boot Diagnostics output.
         */
        storageAccountUri?: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetDataDisk {
        /**
         * The type of Caching which should be used for this Data Disk. Possible values are None, ReadOnly and ReadWrite.
         */
        caching: pulumi.Input<string>;
        /**
         * The create option which should be used for this Data Disk. Possible values are Empty and FromImage. Defaults to `Empty`. (FromImage should only be used if the source image includes data disks).
         */
        createOption?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt the Data Disk. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The size of the Data Disk which should be created. Required if `createOption` is specified as `Empty`.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The Logical Unit Number of the Data Disk, which must be unique within the Virtual Machine. Required if `createOption` is specified as `Empty`.
         */
        lun?: pulumi.Input<number>;
        /**
         * The Type of Storage Account which should back this Data Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS` and `UltraSSD_LRS`.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Specifies the Read-Write IOPS for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskIopsReadWrite?: pulumi.Input<number>;
        /**
         * Specifies the bandwidth in MB per second for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskMbpsReadWrite?: pulumi.Input<number>;
        /**
         * Specifies if Write Accelerator is enabled on the Data Disk. Defaults to `false`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface OrchestratedVirtualMachineScaleSetExtension {
        /**
         * Should the latest version of the Extension be used at Deployment Time, if one is available? This won't auto-update the extension on existing installation. Defaults to `true`.
         */
        autoUpgradeMinorVersionEnabled?: pulumi.Input<boolean>;
        /**
         * An ordered list of Extension names which Virtual Machine Scale Set should provision after VM creation.
         */
        extensionsToProvisionAfterVmCreations?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should failures from the extension be suppressed? Possible values are `true` or `false`.
         *
         * > **Note:** Operational failures such as not connecting to the VM will not be suppressed regardless of the `failureSuppressionEnabled` value.
         */
        failureSuppressionEnabled?: pulumi.Input<boolean>;
        /**
         * A value which, when different to the previous value can be used to force-run the Extension even if the Extension Configuration hasn't changed.
         */
        forceExtensionExecutionOnChange?: pulumi.Input<string>;
        /**
         * The name for the Virtual Machine Scale Set Extension.
         */
        name: pulumi.Input<string>;
        /**
         * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
         *
         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. `TitleCase` vs `snakeCase`) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
         */
        protectedSettings?: pulumi.Input<string>;
        /**
         * A `protectedSettingsFromKeyVault` block as defined below.
         *
         * > **Note:** `protectedSettingsFromKeyVault` cannot be used with `protectedSettings`
         */
        protectedSettingsFromKeyVault?: pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault>;
        /**
         * Specifies the Publisher of the Extension.
         */
        publisher: pulumi.Input<string>;
        /**
         * A JSON String which specifies Settings for the Extension.
         */
        settings?: pulumi.Input<string>;
        /**
         * Specifies the Type of the Extension.
         */
        type: pulumi.Input<string>;
        /**
         * Specifies the version of the extension to use, available versions can be found using the Azure CLI.
         */
        typeHandlerVersion: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault {
        /**
         * The URL to the Key Vault Secret which stores the protected settings.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetIdentity {
        /**
         * Specifies a list of User Managed Identity IDs to be assigned to this Windows Virtual Machine Scale Set.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Identity that should be configured on this Windows Virtual Machine Scale Set. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetNetworkInterface {
        /**
         * Specifies the auxiliary mode used to enable network high-performance feature on Network Virtual Appliances (NVAs). This feature offers competitive performance in Connections Per Second (CPS) optimization, along with improvements to handling large amounts of simultaneous connections. Possible values are `AcceleratedConnections` and `Floating`.
         *
         * > **Note:** `auxiliaryMode` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliaryMode?: pulumi.Input<string>;
        /**
         * Specifies the SKU used for the network high-performance feature on Network Virtual Appliances (NVAs). Possible values are `A1`, `A2`, `A4` and `A8`.
         *
         * > **Note:** `auxiliarySku` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliarySku?: pulumi.Input<string>;
        /**
         * A list of IP Addresses of DNS Servers which should be assigned to the Network Interface.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Does this Network Interface support Accelerated Networking? Possible values are `true` and `false`. Defaults to `false`.
         */
        enableAcceleratedNetworking?: pulumi.Input<boolean>;
        /**
         * Does this Network Interface support IP Forwarding? Possible values are `true` and `false`. Defaults to `false`.
         */
        enableIpForwarding?: pulumi.Input<boolean>;
        /**
         * One or more `ipConfiguration` blocks as defined above.
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfiguration>[]>;
        /**
         * The Name which should be used for this Network Interface. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of a Network Security Group which should be assigned to this Network Interface.
         */
        networkSecurityGroupId?: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration? Possible values are `true` and `false`. Defaults to `false`.
         *
         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
         */
        primary?: pulumi.Input<boolean>;
    }
    interface OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfiguration {
        /**
         * A list of Backend Address Pools IDs from a Application Gateway which this Virtual Machine Scale Set should be connected to.
         */
        applicationGatewayBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Application Security Group IDs which this Virtual Machine Scale Set should be connected to.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Backend Address Pools IDs from a Load Balancer which this Virtual Machine Scale Set should be connected to.
         *
         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a dependsOn between this resource and the Load Balancer Rule.
         */
        loadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Name which should be used for this IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration for this Network Interface? Possible values are `true` and `false`. Defaults to `false`.
         *
         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * A `publicIpAddress` block as defined below.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress>[]>;
        /**
         * The ID of the Subnet which this IP Configuration should be connected to.
         *
         * > **Note:** `subnetId` is required if version is set to `IPv4`.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this IP Configuration. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`.
         */
        version?: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress {
        /**
         * The Prefix which should be used for the Domain Name Label for each Virtual Machine Instance. Azure concatenates the Domain Name Label and Virtual Machine Index to create a unique Domain Name Label for each Virtual Machine. Valid values must be between `1` and `26` characters long, start with a lower case letter, end with a lower case letter or number and contains only `a-z`, `0-9` and `hyphens`.
         */
        domainNameLabel?: pulumi.Input<string>;
        /**
         * The Idle Timeout in Minutes for the Public IP Address. Possible values are in the range `4` to `32`.
         */
        idleTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * One or more `ipTag` blocks as defined above. Changing this forces a new resource to be created.
         */
        ipTags?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag>[]>;
        /**
         * The Name of the Public IP Address Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the Public IP Address Prefix from where Public IP Addresses should be allocated. Changing this forces a new resource to be created.
         */
        publicIpPrefixId?: pulumi.Input<string>;
        /**
         * Specifies what Public IP Address SKU the Public IP Address should be provisioned as. Possible vaules include `Basic_Regional`, `Basic_Global`, `Standard_Regional` or `Standard_Global`. For more information about Public IP Address SKU's and their capabilities, please see the [product documentation](https://docs.microsoft.com/azure/virtual-network/ip-services/public-ip-addresses#sku). Changing this forces a new resource to be created.
         */
        skuName?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this public IP address. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`. Changing this forces a new resource to be created.
         */
        version?: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag {
        /**
         * The IP Tag associated with the Public IP, such as `SQL` or `Storage`. Changing this forces a new resource to be created.
         */
        tag: pulumi.Input<string>;
        /**
         * The Type of IP Tag, such as `FirstPartyUsage`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsDisk {
        /**
         * The Type of Caching which should be used for the Internal OS Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * A `diffDiskSettings` block as defined above. Changing this forces a new resource to be created.
         */
        diffDiskSettings?: pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsDiskDiffDiskSettings>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Changing this forces a new resource to be created.
         *
         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine Scale Set is sourced from.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The Type of Storage Account which should back this the Internal OS Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Specifies if Write Accelerator is enabled on the OS Disk. Defaults to `false`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface OrchestratedVirtualMachineScaleSetOsDiskDiffDiskSettings {
        /**
         * Specifies the Ephemeral Disk Settings for the OS Disk. At this time the only possible value is `Local`. Changing this forces a new resource to be created.
         */
        option: pulumi.Input<string>;
        /**
         * Specifies where to store the Ephemeral Disk. Possible values are `CacheDisk` and `ResourceDisk`. Defaults to `CacheDisk`. Changing this forces a new resource to be created.
         */
        placement?: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfile {
        /**
         * The Base64-Encoded Custom Data which should be used for this Virtual Machine Scale Set.
         *
         * > **Note:** When Custom Data has been configured, it's not possible to remove it without tainting the Virtual Machine Scale Set, due to a limitation of the Azure API.
         */
        customData?: pulumi.Input<string>;
        /**
         * A `linuxConfiguration` block as documented below.
         */
        linuxConfiguration?: pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileLinuxConfiguration>;
        /**
         * A `windowsConfiguration` block as documented below.
         */
        windowsConfiguration?: pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfiguration>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileLinuxConfiguration {
        /**
         * The Password which should be used for the local-administrator on this Virtual Machine. Changing this forces a new resource to be created.
         */
        adminPassword?: pulumi.Input<string>;
        /**
         * A `adminSshKey` block as documented below.
         */
        adminSshKeys?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationAdminSshKey>[]>;
        /**
         * The username of the local administrator on each Virtual Machine Scale Set instance. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The prefix which should be used for the name of the Virtual Machines in this Scale Set. If unspecified this defaults to the value for the name field. If the value of the name field is not a valid `computerNamePrefix`, then you must specify `computerNamePrefix`. Changing this forces a new resource to be created.
         */
        computerNamePrefix?: pulumi.Input<string>;
        /**
         * When an `adminPassword` is specified `disablePasswordAuthentication` must be set to `false`. Defaults to `true`.
         *
         * > **Note:** Either `adminPassword` or `adminSshKey` must be specified.
         */
        disablePasswordAuthentication?: pulumi.Input<boolean>;
        /**
         * Specifies the mode of VM Guest Patching for the virtual machines that are associated to the Virtual Machine Scale Set. Possible values are `AutomaticByPlatform` or `ImageDefault`. Defaults to `ImageDefault`.
         *
         * > **Note:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
         */
        patchAssessmentMode?: pulumi.Input<string>;
        /**
         * Specifies the mode of in-guest patching of this Windows Virtual Machine. Possible values are `ImageDefault` or `AutomaticByPlatform`. Defaults to `ImageDefault`. For more information on patch modes please see the [product documentation](https://docs.microsoft.com/azure/virtual-machines/automatic-vm-guest-patching#patch-orchestration-modes).
         *
         * > **Note:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.  An example of how to correctly configure a Virtual Machine Scale Set to provision a Linux Virtual Machine with Automatic VM Guest Patching enabled can be found in the `./examples/orchestrated-vm-scale-set/automatic-vm-guest-patching` directory within the GitHub Repository.
         */
        patchMode?: pulumi.Input<string>;
        /**
         * Should the Azure VM Agent be provisioned on each Virtual Machine in the Scale Set? Defaults to `true`. Changing this value forces a new resource to be created.
         */
        provisionVmAgent?: pulumi.Input<boolean>;
        /**
         * One or more `secret` blocks as defined below.
         */
        secrets?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecret>[]>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationAdminSshKey {
        /**
         * The Public Key which should be used for authentication, which needs to be in `ssh-rsa` format with at least 2048-bit or in `ssh-ed25519` format.
         */
        publicKey: pulumi.Input<string>;
        /**
         * The Username for which this Public SSH Key should be configured.
         *
         * > **Note:** The Azure VM Agent only allows creating SSH Keys at the path `/home/{username}/.ssh/authorized_keys` - as such this public key will be written to the authorized keys file.
         */
        username: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecret {
        /**
         * One or more `certificate` blocks as defined below.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileLinuxConfigurationSecretCertificate {
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        url: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfiguration {
        /**
         * One or more `additionalUnattendContent` blocks as defined below. Changing this forces a new resource to be created.
         */
        additionalUnattendContents?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationAdditionalUnattendContent>[]>;
        /**
         * The Password which should be used for the local-administrator on this Virtual Machine. Changing this forces a new resource to be created.
         */
        adminPassword: pulumi.Input<string>;
        /**
         * The username of the local administrator on each Virtual Machine Scale Set instance. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The prefix which should be used for the name of the Virtual Machines in this Scale Set. If unspecified this defaults to the value for the `name` field. If the value of the `name` field is not a valid `computerNamePrefix`, then you must specify `computerNamePrefix`. Changing this forces a new resource to be created.
         */
        computerNamePrefix?: pulumi.Input<string>;
        /**
         * Are automatic updates enabled for this Virtual Machine? Defaults to `true`.
         */
        enableAutomaticUpdates?: pulumi.Input<boolean>;
        /**
         * Should the VM be patched without requiring a reboot? Possible values are `true` or `false`. Defaults to `false`. For more information about hot patching please see the [product documentation](https://docs.microsoft.com/azure/automanage/automanage-hotpatch).
         *
         * > **Note:** Hotpatching can only be enabled if the `patchMode` is set to `AutomaticByPlatform`, the `provisionVmAgent` is set to `true`, your `sourceImageReference` references a hotpatching enabled image, the VM's `skuName` is set to a [Azure generation 2](https://docs.microsoft.com/azure/virtual-machines/generation-2#generation-2-vm-sizes) VM SKU and the `extension` contains an application health extension. An example of how to correctly configure a Virtual Machine Scale Set to provision a Windows Virtual Machine with hotpatching enabled can be found in the `./examples/orchestrated-vm-scale-set/hotpatching-enabled` directory within the GitHub Repository.
         */
        hotpatchingEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the mode of VM Guest Patching for the virtual machines that are associated to the Virtual Machine Scale Set. Possible values are `AutomaticByPlatform` or `ImageDefault`. Defaults to `ImageDefault`.
         *
         * > **Note:** If the `patchAssessmentMode` is set to `AutomaticByPlatform` then the `provisionVmAgent` field must be set to `true`.
         */
        patchAssessmentMode?: pulumi.Input<string>;
        /**
         * Specifies the mode of in-guest patching of this Windows Virtual Machine. Possible values are `Manual`, `AutomaticByOS` and `AutomaticByPlatform`. Defaults to `AutomaticByOS`. For more information on patch modes please see the [product documentation](https://docs.microsoft.com/azure/virtual-machines/automatic-vm-guest-patching#patch-orchestration-modes).
         *
         * > **Note:** If `patchMode` is set to `AutomaticByPlatform` the `provisionVmAgent` must be set to `true` and the `extension` must contain at least one application health extension.
         */
        patchMode?: pulumi.Input<string>;
        /**
         * Should the Azure VM Agent be provisioned on each Virtual Machine in the Scale Set? Defaults to `true`. Changing this value forces a new resource to be created.
         */
        provisionVmAgent?: pulumi.Input<boolean>;
        /**
         * One or more `secret` blocks as defined below.
         */
        secrets?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecret>[]>;
        /**
         * Specifies the time zone of the virtual machine, the possible values are defined [here](https://jackstromberg.com/2017/01/list-of-time-zones-consumed-by-azure/).
         */
        timezone?: pulumi.Input<string>;
        /**
         * One or more `winrmListener` blocks as defined below. Changing this forces a new resource to be created.
         */
        winrmListeners?: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationWinrmListener>[]>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationAdditionalUnattendContent {
        /**
         * The XML formatted content that is added to the unattend.xml file for the specified path and component. Changing this forces a new resource to be created.
         */
        content: pulumi.Input<string>;
        /**
         * The name of the setting to which the content applies. Possible values are `AutoLogon` and `FirstLogonCommands`. Changing this forces a new resource to be created.
         */
        setting: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecret {
        /**
         * One or more `certificate` blocks as defined below.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationSecretCertificate {
        /**
         * The certificate store on the Virtual Machine where the certificate should be added.
         */
        store: pulumi.Input<string>;
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        url: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetOsProfileWindowsConfigurationWinrmListener {
        /**
         * The Secret URL of a Key Vault Certificate, which must be specified when protocol is set to `Https`. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        certificateUrl?: pulumi.Input<string>;
        /**
         * Specifies the protocol of listener. Possible values are `Http` or `Https`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetPlan {
        /**
         * Specifies the name of the image from the marketplace. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the image from the marketplace. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetPriorityMix {
        /**
         * Specifies the base number of VMs of `Regular` priority that will be created before any VMs of priority `Spot` are created. Possible values are integers between `0` and `1000`. Defaults to `0`.
         */
        baseRegularCount?: pulumi.Input<number>;
        /**
         * Specifies the desired percentage of VM instances that are of `Regular` priority after the base count has been reached. Possible values are integers between `0` and `100`. Defaults to `0`.
         */
        regularPercentageAboveBase?: pulumi.Input<number>;
    }
    interface OrchestratedVirtualMachineScaleSetRollingUpgradePolicy {
        /**
         * Should the Virtual Machine Scale Set ignore the Azure Zone boundaries when constructing upgrade batches? Possible values are `true` or `false`.
         */
        crossZoneUpgradesEnabled?: pulumi.Input<boolean>;
        /**
         * The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability.
         */
        maxBatchInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch.
         */
        maxUnhealthyInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts.
         */
        maxUnhealthyUpgradedInstancePercent: pulumi.Input<number>;
        /**
         * Create new virtual machines to upgrade the scale set, rather than updating the existing virtual machines. Existing virtual machines will be deleted once the new virtual machines are created for each batch. Possible values are `true` or `false`.
         */
        maximumSurgeInstancesEnabled?: pulumi.Input<boolean>;
        /**
         * The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 duration format.
         */
        pauseTimeBetweenBatches: pulumi.Input<string>;
        /**
         * Upgrade all unhealthy instances in a scale set before any healthy instances. Possible values are `true` or `false`.
         */
        prioritizeUnhealthyInstancesEnabled?: pulumi.Input<boolean>;
    }
    interface OrchestratedVirtualMachineScaleSetSkuProfile {
        /**
         * Specifies the allocation strategy for the virtual machine scale set based on which the VMs will be allocated. Possible values are `CapacityOptimized`, `LowestPrice` and `Prioritized`.
         */
        allocationStrategy: pulumi.Input<string>;
        /**
         * Specifies the VM sizes for the virtual machine scale set.
         */
        vmSizes: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface OrchestratedVirtualMachineScaleSetSourceImageReference {
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines.
         */
        version: pulumi.Input<string>;
    }
    interface OrchestratedVirtualMachineScaleSetTerminationNotification {
        /**
         * Should the termination notification be enabled on this Virtual Machine Scale Set? Possible values `true` or `false`.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Length of time (in minutes, between `5` and `15`) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in `ISO 8601` format. Defaults to `PT5M`.
         */
        timeout?: pulumi.Input<string>;
    }
    interface PacketCaptureFilter {
        /**
         * The local IP Address to be filtered on. Specify `127.0.0.1` for a single address entry, `127.0.0.1-127.0.0.255` for a range and `127.0.0.1;127.0.0.5` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        localIpAddress?: pulumi.Input<string>;
        /**
         * The local port to be filtered on. Specify `80` for single port entry, `80-85` for a range and `80;443;` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        localPort?: pulumi.Input<string>;
        /**
         * The Protocol to be filtered on. Possible values include `Any`, `TCP` and `UDP`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
        /**
         * The remote IP Address to be filtered on. Specify `127.0.0.1` for a single address entry, `127.0.0.1-127.0.0.255` for a range and `127.0.0.1;127.0.0.5` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        remoteIpAddress?: pulumi.Input<string>;
        /**
         * The remote port to be filtered on. Specify `80` for single port entry, `80-85` for a range and `80;443;` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        remotePort?: pulumi.Input<string>;
    }
    interface PacketCaptureStorageLocation {
        /**
         * A valid local path on the target Virtual Machine. Must include the name of the capture file (*.cap). For Linux Virtual Machines it must start with `/var/captures`.
         */
        filePath?: pulumi.Input<string>;
        /**
         * The ID of the storage account where the packet capture sessions should be saved to.
         *
         * > **Note:** At least one of `filePath` or `storageAccountId` must be specified.
         */
        storageAccountId?: pulumi.Input<string>;
        /**
         * The URI of the storage path where the packet capture sessions are saved to.
         */
        storagePath?: pulumi.Input<string>;
    }
    interface RunCommandErrorBlobManagedIdentity {
        /**
         * The client ID of the managed identity.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The object ID of the managed identity.
         */
        objectId?: pulumi.Input<string>;
    }
    interface RunCommandInstanceView {
        endTime?: pulumi.Input<string>;
        errorMessage?: pulumi.Input<string>;
        executionMessage?: pulumi.Input<string>;
        executionState?: pulumi.Input<string>;
        exitCode?: pulumi.Input<number>;
        output?: pulumi.Input<string>;
        startTime?: pulumi.Input<string>;
    }
    interface RunCommandOutputBlobManagedIdentity {
        /**
         * The client ID of the managed identity.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The object ID of the managed identity.
         */
        objectId?: pulumi.Input<string>;
    }
    interface RunCommandParameter {
        /**
         * The run parameter name.
         */
        name: pulumi.Input<string>;
        /**
         * The run parameter value.
         */
        value: pulumi.Input<string>;
    }
    interface RunCommandProtectedParameter {
        /**
         * The run parameter name.
         */
        name: pulumi.Input<string>;
        /**
         * The run parameter value.
         */
        value: pulumi.Input<string>;
    }
    interface RunCommandSource {
        commandId?: pulumi.Input<string>;
        script?: pulumi.Input<string>;
        scriptUri?: pulumi.Input<string>;
        /**
         * A `scriptUriManagedIdentity` block as defined above.
         */
        scriptUriManagedIdentity?: pulumi.Input<inputs.compute.RunCommandSourceScriptUriManagedIdentity>;
    }
    interface RunCommandSourceScriptUriManagedIdentity {
        /**
         * The client ID of the managed identity.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The object ID of the managed identity.
         */
        objectId?: pulumi.Input<string>;
    }
    interface ScaleSetBootDiagnostics {
        /**
         * Whether to enable boot diagnostics for the virtual machine. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Blob endpoint for the storage account to hold the virtual machine's diagnostic files. This must be the root of a storage account, and not a storage container.
         */
        storageUri: pulumi.Input<string>;
    }
    interface ScaleSetExtension {
        /**
         * Specifies whether or not to use the latest minor version available.
         */
        autoUpgradeMinorVersion?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the extension.
         */
        name: pulumi.Input<string>;
        /**
         * The protectedSettings passed to the extension, like settings, these are specified as a JSON object in a string.
         */
        protectedSettings?: pulumi.Input<string>;
        /**
         * Specifies a dependency array of extensions required to be executed before, the array stores the name of each extension.
         */
        provisionAfterExtensions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The publisher of the extension, available publishers can be found by using the Azure CLI.
         */
        publisher: pulumi.Input<string>;
        /**
         * The settings passed to the extension, these are specified as a JSON object in a string.
         */
        settings?: pulumi.Input<string>;
        /**
         * The type of extension, available types for a publisher can be found using the Azure CLI.
         */
        type: pulumi.Input<string>;
        /**
         * Specifies the version of the extension to use, available versions can be found using the Azure CLI.
         */
        typeHandlerVersion: pulumi.Input<string>;
    }
    interface ScaleSetIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned to the VMSS. Required if `type` is `UserAssigned`.
         *
         * ```typescript
         * import * as pulumi from "@pulumi/pulumi";
         * import * as azure from "@pulumi/azure";
         *
         * const example = new azure.compute.ScaleSet("example", {
         *     name: "vm-scaleset",
         *     resourceGroupName: exampleAzurermResourceGroup.name,
         *     location: exampleAzurermResourceGroup.location,
         *     sku: {
         *         name: vmSku,
         *         tier: "Standard",
         *         capacity: instanceCount,
         *     },
         *     identity: {
         *         type: "SystemAssigned",
         *     },
         *     extensions: [{
         *         name: "MSILinuxExtension",
         *         publisher: "Microsoft.ManagedIdentity",
         *         type: "ManagedIdentityExtensionForLinux",
         *         typeHandlerVersion: "1.0",
         *         settings: "{\"port\": 50342}",
         *     }],
         * });
         * export const principalId = example.identity.apply(identity => identity?.principalId);
         * ```
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type to be assigned to the scale set. Allowable values are `SystemAssigned` and `UserAssigned`. For the `SystemAssigned` identity the scale set's Service Principal ID (SPN) can be retrieved after the scale set has been created. See [documentation](https://docs.microsoft.com/azure/active-directory/managed-service-identity/overview) for more information. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ScaleSetNetworkProfile {
        /**
         * Specifies whether to enable accelerated networking or not.
         */
        acceleratedNetworking?: pulumi.Input<boolean>;
        /**
         * A `dnsSettings` block as documented below.
         */
        dnsSettings?: pulumi.Input<inputs.compute.ScaleSetNetworkProfileDnsSettings>;
        /**
         * An `ipConfiguration` block as documented below.
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.compute.ScaleSetNetworkProfileIpConfiguration>[]>;
        /**
         * Whether IP forwarding is enabled on this NIC. Defaults to `false`.
         */
        ipForwarding?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the network interface configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the identifier for the network security group.
         */
        networkSecurityGroupId?: pulumi.Input<string>;
        /**
         * Indicates whether network interfaces created from the network interface configuration will be the primary NIC of the VM.
         */
        primary: pulumi.Input<boolean>;
    }
    interface ScaleSetNetworkProfileDnsSettings {
        /**
         * Specifies an array of DNS servers.
         */
        dnsServers: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ScaleSetNetworkProfileIpConfiguration {
        /**
         * Specifies an array of references to backend address pools of application gateways. A scale set can reference backend address pools of multiple application gateways. Multiple scale sets can use the same application gateway.
         */
        applicationGatewayBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies up to `20` application security group IDs.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies an array of references to backend address pools of load balancers. A scale set can reference backend address pools of one public and one internal load balancer. Multiple scale sets cannot use the same load balancer.
         *
         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies an array of references to inbound NAT pools for load balancers. A scale set can reference inbound NAT pools of one public and one internal load balancer. Multiple scale sets cannot use the same load balancer.
         *
         * > **NOTE:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerInboundNatRulesIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies if this ipConfiguration is the primary one.
         */
        primary: pulumi.Input<boolean>;
        /**
         * Describes a virtual machines scale set IP Configuration's PublicIPAddress configuration. The `publicIpAddressConfiguration` block is documented below.
         */
        publicIpAddressConfiguration?: pulumi.Input<inputs.compute.ScaleSetNetworkProfileIpConfigurationPublicIpAddressConfiguration>;
        /**
         * Specifies the identifier of the subnet.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ScaleSetNetworkProfileIpConfigurationPublicIpAddressConfiguration {
        /**
         * The domain name label for the DNS settings.
         */
        domainNameLabel: pulumi.Input<string>;
        /**
         * The idle timeout in minutes. This value must be between 4 and 30.
         */
        idleTimeout: pulumi.Input<number>;
        /**
         * The name of the public IP address configuration
         */
        name: pulumi.Input<string>;
    }
    interface ScaleSetOsProfile {
        /**
         * Specifies the administrator password to use for all the instances of virtual machines in a scale set.
         */
        adminPassword?: pulumi.Input<string>;
        /**
         * Specifies the administrator account name to use for all the instances of virtual machines in the scale set.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * Specifies the computer name prefix for all of the virtual machines in the scale set. Computer name prefixes must be 1 to 9 characters long for windows images and 1 - 58 for Linux. Changing this forces a new resource to be created.
         */
        computerNamePrefix: pulumi.Input<string>;
        /**
         * Specifies custom data to supply to the machine. On Linux-based systems, this can be used as a cloud-init script. On other systems, this will be copied as a file on disk. Internally, this provider will base64 encode this value before sending it to the API. The maximum length of the binary array is 65535 bytes.
         */
        customData?: pulumi.Input<string>;
    }
    interface ScaleSetOsProfileLinuxConfig {
        /**
         * Specifies whether password authentication should be disabled. Defaults to `false`. Changing this forces a new resource to be created.
         */
        disablePasswordAuthentication?: pulumi.Input<boolean>;
        /**
         * One or more `sshKeys` blocks as defined below.
         *
         * > **Note:** Please note that the only allowed `path` is `/home/<username>/.ssh/authorized_keys` due to a limitation of Azure.
         *
         * > **NOTE:** At least one `sshKeys` block is required if `disablePasswordAuthentication` is set to `true`.
         */
        sshKeys?: pulumi.Input<pulumi.Input<inputs.compute.ScaleSetOsProfileLinuxConfigSshKey>[]>;
    }
    interface ScaleSetOsProfileLinuxConfigSshKey {
        /**
         * The Public SSH Key which should be written to the `path` defined above.
         *
         * > **Note:** Azure only supports RSA SSH2 key signatures of at least 2048 bits in length
         *
         * > **NOTE:** Rather than defining this in-line you can source this from a local file using the `file` function - for example `keyData = file("~/.ssh/id_rsa.pub")`.
         */
        keyData?: pulumi.Input<string>;
        /**
         * The path of the destination file on the virtual machine
         *
         * > **NOTE:** Due to a limitation in the Azure VM Agent the only allowed `path` is `/home/{username}/.ssh/authorized_keys`.
         */
        path: pulumi.Input<string>;
    }
    interface ScaleSetOsProfileSecret {
        /**
         * Specifies the key vault to use.
         */
        sourceVaultId: pulumi.Input<string>;
        /**
         * (Required, on Windows machines) One or more `vaultCertificates` blocks as defined below.
         */
        vaultCertificates?: pulumi.Input<pulumi.Input<inputs.compute.ScaleSetOsProfileSecretVaultCertificate>[]>;
    }
    interface ScaleSetOsProfileSecretVaultCertificate {
        /**
         * (Required, on windows machines) Specifies the certificate store on the Virtual Machine where the certificate should be added to.
         */
        certificateStore?: pulumi.Input<string>;
        /**
         * It is the Base64 encoding of a JSON Object that which is encoded in UTF-8 of which the contents need to be `data`, `dataType` and `password`.
         */
        certificateUrl: pulumi.Input<string>;
    }
    interface ScaleSetOsProfileWindowsConfig {
        /**
         * An `additionalUnattendConfig` block as documented below.
         */
        additionalUnattendConfigs?: pulumi.Input<pulumi.Input<inputs.compute.ScaleSetOsProfileWindowsConfigAdditionalUnattendConfig>[]>;
        /**
         * Indicates whether virtual machines in the scale set are enabled for automatic updates.
         */
        enableAutomaticUpgrades?: pulumi.Input<boolean>;
        /**
         * Indicates whether virtual machine agent should be provisioned on the virtual machines in the scale set.
         */
        provisionVmAgent?: pulumi.Input<boolean>;
        /**
         * A collection of `winrm` blocks as documented below.
         */
        winrms?: pulumi.Input<pulumi.Input<inputs.compute.ScaleSetOsProfileWindowsConfigWinrm>[]>;
    }
    interface ScaleSetOsProfileWindowsConfigAdditionalUnattendConfig {
        /**
         * Specifies the name of the component to configure with the added content. The only allowable value is `Microsoft-Windows-Shell-Setup`.
         */
        component: pulumi.Input<string>;
        /**
         * Specifies the base-64 encoded XML formatted content that is added to the unattend.xml file for the specified path and component.
         */
        content: pulumi.Input<string>;
        /**
         * Specifies the name of the pass that the content applies to. The only allowable value is `oobeSystem`.
         */
        pass: pulumi.Input<string>;
        /**
         * Specifies the name of the setting to which the content applies. Possible values are: `FirstLogonCommands` and `AutoLogon`.
         */
        settingName: pulumi.Input<string>;
    }
    interface ScaleSetOsProfileWindowsConfigWinrm {
        /**
         * Specifies URL of the certificate with which new Virtual Machines is provisioned.
         */
        certificateUrl?: pulumi.Input<string>;
        /**
         * Specifies the protocol of listener
         */
        protocol: pulumi.Input<string>;
    }
    interface ScaleSetPacketCaptureFilter {
        /**
         * The local IP Address to be filtered on. Specify `127.0.0.1` for a single address entry, `127.0.0.1-127.0.0.255` for a range and `127.0.0.1;127.0.0.5` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        localIpAddress?: pulumi.Input<string>;
        /**
         * The local port to be filtered on. Specify `80` for single port entry, `80-85` for a range and `80;443;` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        localPort?: pulumi.Input<string>;
        /**
         * The Protocol to be filtered on. Possible values include `Any`, `TCP` and `UDP`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
        /**
         * The remote IP Address to be filtered on. Specify `127.0.0.1` for a single address entry, `127.0.0.1-127.0.0.255` for a range and `127.0.0.1;127.0.0.5` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        remoteIpAddress?: pulumi.Input<string>;
        /**
         * The remote port to be filtered on. Specify `80` for single port entry, `80-85` for a range and `80;443;` for multiple entries. Multiple ranges and mixing ranges with multiple entries are currently not supported. Changing this forces a new resource to be created.
         */
        remotePort?: pulumi.Input<string>;
    }
    interface ScaleSetPacketCaptureMachineScope {
        /**
         * A list of Virtual Machine Scale Set instance IDs which should be excluded from running Packet Capture, e.g. `["0", "2"]`. Changing this forces a new resource to be created.
         */
        excludeInstanceIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Virtual Machine Scale Set instance IDs which should be included for Packet Capture, e.g. `["1", "3"]`. Changing this forces a new resource to be created.
         */
        includeInstanceIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ScaleSetPacketCaptureStorageLocation {
        /**
         * A valid local path on the targeting VM. Must include the name of the capture file (*.cap). For Linux virtual machine it must start with `/var/captures`.
         */
        filePath?: pulumi.Input<string>;
        /**
         * The ID of the storage account to save the packet capture session
         *
         * > **Note:** At least one of `filePath` or `storageAccountId` must be specified.
         */
        storageAccountId?: pulumi.Input<string>;
        /**
         * The URI of the storage path where the packet capture sessions are saved to.
         */
        storagePath?: pulumi.Input<string>;
    }
    interface ScaleSetPlan {
        /**
         * Specifies the name of the image from the marketplace.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the image from the marketplace.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image.
         */
        publisher: pulumi.Input<string>;
    }
    interface ScaleSetRollingUpgradePolicy {
        /**
         * The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability. Defaults to `20`.
         */
        maxBatchInstancePercent?: pulumi.Input<number>;
        /**
         * The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch. Defaults to `20`.
         */
        maxUnhealthyInstancePercent?: pulumi.Input<number>;
        /**
         * The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts. Defaults to `20`.
         */
        maxUnhealthyUpgradedInstancePercent?: pulumi.Input<number>;
        /**
         * The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format for duration (<https://en.wikipedia.org/wiki/ISO_8601#Durations>). Defaults to `PT0S` seconds represented as `PT0S`.
         */
        pauseTimeBetweenBatches?: pulumi.Input<string>;
    }
    interface ScaleSetSku {
        /**
         * Specifies the number of virtual machines in the scale set.
         */
        capacity: pulumi.Input<number>;
        /**
         * Specifies the size of virtual machines in a scale set.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the tier of virtual machines in a scale set. Possible values, `standard` or `basic`.
         */
        tier?: pulumi.Input<string>;
    }
    interface ScaleSetStandbyPoolElasticityProfile {
        /**
         * Specifies the maximum number of virtual machines in the standby pool.
         */
        maxReadyCapacity: pulumi.Input<number>;
        /**
         * Specifies the desired minimum number of virtual machines in the standby pool.
         *
         * > **Note:** `minReadyCapacity` cannot exceed `maxReadyCapacity`.
         */
        minReadyCapacity: pulumi.Input<number>;
    }
    interface ScaleSetStorageProfileDataDisk {
        /**
         * Specifies the caching requirements. Possible values include: `None` (default), `ReadOnly`, `ReadWrite`.
         */
        caching?: pulumi.Input<string>;
        /**
         * Specifies how the data disk should be created. The only possible options are `FromImage` and `Empty`.
         */
        createOption: pulumi.Input<string>;
        /**
         * Specifies the size of the disk in GB. This element is required when creating an empty disk.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * Specifies the Logical Unit Number of the disk in each virtual machine in the scale set.
         */
        lun: pulumi.Input<number>;
        /**
         * Specifies the type of managed disk to create. Value must be either `Standard_LRS`, `StandardSSD_LRS` or `Premium_LRS`.
         */
        managedDiskType?: pulumi.Input<string>;
    }
    interface ScaleSetStorageProfileImageReference {
        /**
         * Specifies the ID of the (custom) image to use to create the virtual machine scale set, as in the example below.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the offer of the image used to create the virtual machines.
         */
        offer?: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines.
         */
        publisher?: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines.
         */
        sku?: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines.
         */
        version?: pulumi.Input<string>;
    }
    interface ScaleSetStorageProfileOsDisk {
        /**
         * Specifies the caching requirements. Possible values include: `None` (default), `ReadOnly`, `ReadWrite`.
         */
        caching?: pulumi.Input<string>;
        /**
         * Specifies how the virtual machine should be created. The only possible option is `FromImage`.
         */
        createOption: pulumi.Input<string>;
        /**
         * Specifies the blob URI for user image. A virtual machine scale set creates an os disk in the same container as the user image.
         * Updating the osDisk image causes the existing disk to be deleted and a new one created with the new image. If the VM scale set is in Manual upgrade mode then the virtual machines are not updated until they have manualUpgrade applied to them.
         * When setting this field `osType` needs to be specified. Cannot be used when `vhdContainers`, `managedDiskType` or `storageProfileImageReference` are specified.
         */
        image?: pulumi.Input<string>;
        /**
         * Specifies the type of managed disk to create. Value you must be either `Standard_LRS`, `StandardSSD_LRS` or `Premium_LRS`. Cannot be used when `vhdContainers` or `image` is specified.
         */
        managedDiskType?: pulumi.Input<string>;
        /**
         * Specifies the disk name. Must be specified when using unmanaged disk ('managed_disk_type' property not set).
         */
        name?: pulumi.Input<string>;
        /**
         * Specifies the operating system Type, valid values are windows, Linux.
         */
        osType?: pulumi.Input<string>;
        /**
         * Specifies the VHD URI. Cannot be used when `image` or `managedDiskType` is specified.
         */
        vhdContainers?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SharedImageGallerySharing {
        /**
         * A `communityGallery` block as defined below. Changing this forces a new resource to be created.
         *
         * > **Note:** `communityGallery` must be set when `permission` is set to `Community`.
         */
        communityGallery?: pulumi.Input<inputs.compute.SharedImageGallerySharingCommunityGallery>;
        /**
         * The permission of the Shared Image Gallery when sharing. Possible values are `Community`, `Groups` and `Private`. Changing this forces a new resource to be created.
         *
         * > **Note:** This requires that the Preview Feature `Microsoft.Compute/CommunityGalleries` is enabled, see [the documentation](https://learn.microsoft.com/azure/virtual-machines/share-gallery-community?tabs=cli) for more information.
         */
        permission: pulumi.Input<string>;
    }
    interface SharedImageGallerySharingCommunityGallery {
        /**
         * The End User Licence Agreement for the Shared Image Gallery. Changing this forces a new resource to be created.
         */
        eula: pulumi.Input<string>;
        /**
         * Specifies the name of the Shared Image Gallery. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Prefix of the community public name for the Shared Image Gallery. Changing this forces a new resource to be created.
         */
        prefix: pulumi.Input<string>;
        /**
         * Email of the publisher for the Shared Image Gallery. Changing this forces a new resource to be created.
         */
        publisherEmail: pulumi.Input<string>;
        /**
         * URI of the publisher for the Shared Image Gallery. Changing this forces a new resource to be created.
         */
        publisherUri: pulumi.Input<string>;
    }
    interface SharedImageIdentifier {
        /**
         * The Offer Name for this Shared Image. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The Publisher Name for this Gallery Image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The Name of the SKU for this Gallery Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
    }
    interface SharedImagePurchasePlan {
        /**
         * The Purchase Plan Name for this Shared Image. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The Purchase Plan Product for this Gallery Image. Changing this forces a new resource to be created.
         */
        product?: pulumi.Input<string>;
        /**
         * The Purchase Plan Publisher for this Gallery Image. Changing this forces a new resource to be created.
         */
        publisher?: pulumi.Input<string>;
    }
    interface SharedImageVersionTargetRegion {
        /**
         * The ID of the Disk Encryption Set to encrypt the Image Version in the target region. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Specifies whether this Shared Image Version should be excluded when querying for the `latest` version. Defaults to `false`.
         */
        excludeFromLatestEnabled?: pulumi.Input<boolean>;
        /**
         * The Azure Region in which this Image Version should exist.
         */
        name: pulumi.Input<string>;
        /**
         * The number of replicas of the Image Version to be created per region.
         */
        regionalReplicaCount: pulumi.Input<number>;
        /**
         * The storage account type for the image version. Possible values are `Standard_LRS`, `Premium_LRS` and `Standard_ZRS`. Defaults to `Standard_LRS`. You can store all of your image version replicas in Zone Redundant Storage by specifying `Standard_ZRS`.
         */
        storageAccountType?: pulumi.Input<string>;
    }
    interface SnapshotEncryptionSettings {
        /**
         * A `diskEncryptionKey` block as defined below.
         */
        diskEncryptionKey: pulumi.Input<inputs.compute.SnapshotEncryptionSettingsDiskEncryptionKey>;
        /**
         * A `keyEncryptionKey` block as defined below.
         */
        keyEncryptionKey?: pulumi.Input<inputs.compute.SnapshotEncryptionSettingsKeyEncryptionKey>;
    }
    interface SnapshotEncryptionSettingsDiskEncryptionKey {
        /**
         * The URL to the Key Vault Secret used as the Disk Encryption Key. This can be found as `id` on the `azure.keyvault.Secret` resource.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface SnapshotEncryptionSettingsKeyEncryptionKey {
        /**
         * The URL to the Key Vault Key used as the Key Encryption Key. This can be found as `id` on the `azure.keyvault.Key` resource.
         */
        keyUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface VirtualMachineAdditionalCapabilities {
        /**
         * Should Ultra SSD disk be enabled for this Virtual Machine? Changing this forces a new resource to be created.
         *
         * > **Note:** Azure Ultra Disk Storage is only available in a region that support availability zones and can only enabled on the following VM series: `ESv3`, `DSv3`, `FSv3`, `LSv2`, `M` and `Mv2`. For more information see the `Azure Ultra Disk Storage` [product documentation](https://docs.microsoft.com/azure/virtual-machines/windows/disks-enable-ultra-ssd).
         */
        ultraSsdEnabled: pulumi.Input<boolean>;
    }
    interface VirtualMachineBootDiagnostics {
        /**
         * Should Boot Diagnostics be enabled for this Virtual Machine?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * The Storage Account's Blob Endpoint which should hold the virtual machine's diagnostic files.
         *
         * > **NOTE:** This needs to be the root of a Storage Account and not a Storage Container.
         */
        storageUri: pulumi.Input<string>;
    }
    interface VirtualMachineIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Virtual Machine.
         *
         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Virtual Machine. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         *
         * > **NOTE:** Managed Service Identity previously required the installation of a VM Extension, but this information [is now available via the Azure Instance Metadata Service](https://docs.microsoft.com/azure/active-directory/managed-service-identity/overview#how-does-it-work).
         *
         * > **NOTE:** When `type` is set to `SystemAssigned`, identity the Principal ID can be retrieved after the virtual machine has been created. More details are available below. See [documentation](https://docs.microsoft.com/azure/active-directory/managed-service-identity/overview) for additional information.
         */
        type: pulumi.Input<string>;
    }
    interface VirtualMachineOsProfile {
        /**
         * (Optional for Windows, Optional for Linux) The password associated with the local administrator account.
         *
         * > **NOTE:** If using Linux, it may be preferable to use SSH Key authentication (available in the `osProfileLinuxConfig` block) instead of password authentication.
         */
        adminPassword?: pulumi.Input<string>;
        /**
         * Specifies the name of the local administrator account.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * Specifies the name of the Virtual Machine. Changing this forces a new resource to be created.
         */
        computerName: pulumi.Input<string>;
        /**
         * Specifies custom data to supply to the machine. On Linux-based systems, this can be used as a cloud-init script. On other systems, this will be copied as a file on disk. Internally, this provider will base64 encode this value before sending it to the API. The maximum length of the binary array is 65535 bytes. Changing this forces a new resource to be created.
         */
        customData?: pulumi.Input<string>;
    }
    interface VirtualMachineOsProfileLinuxConfig {
        /**
         * Specifies whether password authentication should be disabled. If set to `false`, an `adminPassword` must be specified.
         */
        disablePasswordAuthentication: pulumi.Input<boolean>;
        /**
         * One or more `sshKeys` blocks as defined below. This field is required if `disablePasswordAuthentication` is set to `true`.
         */
        sshKeys?: pulumi.Input<pulumi.Input<inputs.compute.VirtualMachineOsProfileLinuxConfigSshKey>[]>;
    }
    interface VirtualMachineOsProfileLinuxConfigSshKey {
        /**
         * The Public SSH Key which should be written to the `path` defined above.
         *
         * > **Note:** Azure only supports RSA SSH2 key signatures of at least 2048 bits in length
         */
        keyData: pulumi.Input<string>;
        /**
         * The path of the destination file on the virtual machine
         *
         * > **NOTE:** Due to a limitation in the Azure VM Agent the only allowed `path` is `/home/{username}/.ssh/authorized_keys`.
         */
        path: pulumi.Input<string>;
    }
    interface VirtualMachineOsProfileSecret {
        /**
         * Specifies the ID of the Key Vault to use.
         */
        sourceVaultId: pulumi.Input<string>;
        /**
         * One or more `vaultCertificates` blocks as defined below.
         */
        vaultCertificates?: pulumi.Input<pulumi.Input<inputs.compute.VirtualMachineOsProfileSecretVaultCertificate>[]>;
    }
    interface VirtualMachineOsProfileSecretVaultCertificate {
        /**
         * (Required, on windows machines) Specifies the certificate store on the Virtual Machine where the certificate should be added to, such as `My`.
         */
        certificateStore?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret. Stored secret is the Base64 encoding of a JSON Object that which is encoded in UTF-8 of which the contents need to be:
         *
         * ```json
         * {
         * "data":"<Base64-encoded-certificate>",
         * "dataType":"pfx",
         * "password":"<pfx-file-password>"
         * }
         * ```
         *
         * > **NOTE:** If your certificate is stored in Azure Key Vault - this can be sourced from the `secretId` property on the `azure.keyvault.Certificate` resource.
         */
        certificateUrl: pulumi.Input<string>;
    }
    interface VirtualMachineOsProfileWindowsConfig {
        /**
         * An `additionalUnattendConfig` block as defined below.
         */
        additionalUnattendConfigs?: pulumi.Input<pulumi.Input<inputs.compute.VirtualMachineOsProfileWindowsConfigAdditionalUnattendConfig>[]>;
        /**
         * Are automatic updates enabled on this Virtual Machine? Defaults to `false`.
         */
        enableAutomaticUpgrades?: pulumi.Input<boolean>;
        /**
         * Should the Azure Virtual Machine Guest Agent be installed on this Virtual Machine? Defaults to `false`.
         *
         * > **NOTE:** This is different from the Default value used for this field within Azure.
         */
        provisionVmAgent?: pulumi.Input<boolean>;
        /**
         * Specifies the time zone of the virtual machine, [the possible values are defined here](https://jackstromberg.com/2017/01/list-of-time-zones-consumed-by-azure/). Changing this forces a new resource to be created.
         */
        timezone?: pulumi.Input<string>;
        /**
         * One or more `winrm` blocks as defined below.
         */
        winrms?: pulumi.Input<pulumi.Input<inputs.compute.VirtualMachineOsProfileWindowsConfigWinrm>[]>;
    }
    interface VirtualMachineOsProfileWindowsConfigAdditionalUnattendConfig {
        /**
         * Specifies the name of the component to configure with the added content. The only allowable value is `Microsoft-Windows-Shell-Setup`.
         */
        component: pulumi.Input<string>;
        /**
         * Specifies the base-64 encoded XML formatted content that is added to the unattend.xml file for the specified path and component.
         */
        content: pulumi.Input<string>;
        /**
         * Specifies the name of the pass that the content applies to. The only allowable value is `oobeSystem`.
         */
        pass: pulumi.Input<string>;
        /**
         * Specifies the name of the setting to which the content applies. Possible values are: `FirstLogonCommands` and `AutoLogon`.
         */
        settingName: pulumi.Input<string>;
    }
    interface VirtualMachineOsProfileWindowsConfigWinrm {
        /**
         * The ID of the Key Vault Secret which contains the encrypted Certificate which should be installed on the Virtual Machine. This certificate must also be specified in the `vaultCertificates` block within the `osProfileSecrets` block.
         *
         * > **NOTE:** This can be sourced from the `secretId` field on the `azure.keyvault.Certificate` resource.
         */
        certificateUrl?: pulumi.Input<string>;
        /**
         * Specifies the protocol of listener. Possible values are `HTTP` or `HTTPS`.
         */
        protocol: pulumi.Input<string>;
    }
    interface VirtualMachinePlan {
        /**
         * Specifies the name of the image from the marketplace.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the image from the marketplace.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image.
         */
        publisher: pulumi.Input<string>;
    }
    interface VirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault {
        /**
         * The URL to the Key Vault Secret which stores the protected settings.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface VirtualMachineStorageDataDisk {
        /**
         * Specifies the caching requirements for the Data Disk. Possible values include `None`, `ReadOnly` and `ReadWrite`.
         */
        caching?: pulumi.Input<string>;
        /**
         * Specifies how the data disk should be created. Possible values are `Attach`, `FromImage` and `Empty`.
         *
         * > **NOTE:** If using an image that does not have data to be written to the Data Disk, use `Empty` as the create option in order to create the desired disk without any data.
         */
        createOption: pulumi.Input<string>;
        /**
         * Specifies the size of the data disk in gigabytes.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * Specifies the logical unit number of the data disk. This needs to be unique within all the Data Disks on the Virtual Machine.
         */
        lun: pulumi.Input<number>;
        /**
         * Specifies the ID of an Existing Managed Disk which should be attached to this Virtual Machine. When this field is set `createOption` must be set to `Attach`.
         *
         * The following properties apply when using Unmanaged Disks:
         */
        managedDiskId?: pulumi.Input<string>;
        /**
         * Specifies the type of managed disk to create. Possible values are either `Standard_LRS`, `StandardSSD_LRS`, `Premium_LRS` or `UltraSSD_LRS`.
         *
         * > **Note:** `managedDiskType` of type `UltraSSD_LRS` is currently in preview and are not available to subscriptions that have not [requested](https://aka.ms/UltraSSDPreviewSignUp) onboarding to `Azure Ultra Disk Storage` preview. `Azure Ultra Disk Storage` is only available in `East US 2`, `North Europe`, and `Southeast Asia` regions. For more information see the `Azure Ultra Disk Storage` [product documentation](https://docs.microsoft.com/azure/virtual-machines/windows/disks-enable-ultra-ssd), [product blog](https://azure.microsoft.com/en-us/blog/announcing-the-general-availability-of-azure-ultra-disk-storage/) and [FAQ](https://docs.microsoft.com/azure/virtual-machines/windows/faq-for-disks#ultra-disks). You must also set `additional_capabilities.ultra_ssd_enabled` to `true`.
         */
        managedDiskType?: pulumi.Input<string>;
        /**
         * The name of the Data Disk.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the URI of the VHD file backing this Unmanaged Data Disk.
         */
        vhdUri?: pulumi.Input<string>;
        /**
         * Specifies if Write Accelerator is enabled on the disk. This can only be enabled on `Premium_LRS` managed disks with no caching and [M-Series VMs](https://docs.microsoft.com/azure/virtual-machines/workloads/sap/how-to-enable-write-accelerator). Defaults to `false`.
         *
         * The following properties apply when using Managed Disks:
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface VirtualMachineStorageImageReference {
        /**
         * Specifies the ID of the Custom Image which the Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the offer of the image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        offer?: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        publisher?: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        sku?: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machine. Changing this forces a new resource to be created.
         *
         * To provision a Custom Image, the following fields are applicable:
         */
        version?: pulumi.Input<string>;
    }
    interface VirtualMachineStorageOsDisk {
        /**
         * Specifies the caching requirements for the OS Disk. Possible values include `None`, `ReadOnly` and `ReadWrite`.
         */
        caching?: pulumi.Input<string>;
        /**
         * Specifies how the OS Disk should be created. Possible values are `Attach` (managed disks only) and `FromImage`.
         */
        createOption: pulumi.Input<string>;
        /**
         * Specifies the size of the OS Disk in gigabytes.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * Specifies the Image URI in the format `publisherName:offer:skus:version`. This field can also specify the [VHD URI](https://docs.microsoft.com/azure/virtual-machines/linux/tutorial-custom-images) of a custom VM image to clone. When cloning a Custom (Unmanaged) Disk Image the `osType` field must be set.
         */
        imageUri?: pulumi.Input<string>;
        /**
         * Specifies the ID of an existing Managed Disk which should be attached as the OS Disk of this Virtual Machine. If this is set then the `createOption` must be set to `Attach`. Changing this forces a new resource to be created.
         */
        managedDiskId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Disk which should be created. Possible values are `Standard_LRS`, `StandardSSD_LRS` or `Premium_LRS`.
         *
         * The following properties apply when using Unmanaged Disks:
         */
        managedDiskType?: pulumi.Input<string>;
        /**
         * Specifies the name of the OS Disk.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the Operating System on the OS Disk. Possible values are `Linux` and `Windows`.
         */
        osType?: pulumi.Input<string>;
        /**
         * Specifies the URI of the VHD file backing this Unmanaged OS Disk. Changing this forces a new resource to be created.
         */
        vhdUri?: pulumi.Input<string>;
        /**
         * Specifies if Write Accelerator is enabled on the disk. This can only be enabled on `Premium_LRS` managed disks with no caching and [M-Series VMs](https://docs.microsoft.com/azure/virtual-machines/workloads/sap/how-to-enable-write-accelerator). Defaults to `false`.
         *
         * The following properties apply when using Managed Disks:
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineAdditionalCapabilities {
        /**
         * Whether to enable the hibernation capability or not.
         */
        hibernationEnabled?: pulumi.Input<boolean>;
        /**
         * Should the capacity to enable Data Disks of the `UltraSSD_LRS` storage account type be supported on this Virtual Machine? Defaults to `false`.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineAdditionalUnattendContent {
        /**
         * The XML formatted content that is added to the unattend.xml file for the specified path and component. Changing this forces a new resource to be created.
         */
        content: pulumi.Input<string>;
        /**
         * The name of the setting to which the content applies. Possible values are `AutoLogon` and `FirstLogonCommands`. Changing this forces a new resource to be created.
         */
        setting: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineBootDiagnostics {
        /**
         * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
         *
         * > **NOTE:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics.
         */
        storageAccountUri?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineGalleryApplication {
        /**
         * Specifies whether the version will be automatically updated for the VM when a new Gallery Application version is available in PIR/SIG. Defaults to `false`.
         */
        automaticUpgradeEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the URI to an Azure Blob that will replace the default configuration for the package if provided.
         */
        configurationBlobUri?: pulumi.Input<string>;
        /**
         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2147483647`. Defaults to `0`.
         */
        order?: pulumi.Input<number>;
        /**
         * Specifies a passthrough value for more generic context. This field can be any valid `string` value.
         */
        tag?: pulumi.Input<string>;
        /**
         * Specifies whether any failure for any operation in the VmApplication will fail the deployment of the VM. Defaults to `false`.
         */
        treatFailureAsDeploymentFailureEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the Gallery Application Version resource ID.
         */
        versionId: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Windows Virtual Machine.
         *
         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Virtual Machine. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineOsDisk {
        /**
         * The Type of Caching which should be used for the Internal OS Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * A `diffDiskSettings` block as defined above. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `diffDiskSettings` can only be set when `caching` is set to `ReadOnly`. More information can be found [here](https://docs.microsoft.com/azure/virtual-machines/ephemeral-os-disks-deploy#vm-template-deployment). Additionally, this property cannot be set when an existing Managed Disk is used to create the Virtual Machine by setting `osManagedDiskId`.
         */
        diffDiskSettings?: pulumi.Input<inputs.compute.WindowsVirtualMachineOsDiskDiffDiskSettings>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`.
         *
         * > **NOTE:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine is sourced from.
         *
         * > **NOTE:** If specified this must be equal to or larger than the size of the Image the Virtual Machine is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The ID of the OS disk.
         */
        id?: pulumi.Input<string>;
        /**
         * The name which should be used for the Internal OS Disk. Changing this forces a new resource to be created.
         *
         * > **Note:** a value for `name` cannot be specified if/when the Virtual Machine has been created using an existing Managed Disk for the OS by setting `osManagedDiskId`.
         */
        name?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt this OS Disk when the Virtual Machine is a Confidential VM. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        secureVmDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Encryption Type when the Virtual Machine is a Confidential VM. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
         *
         * > **NOTE:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
         *
         * > **NOTE:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        securityEncryptionType?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this the Internal OS Disk. Possible values are `Standard_LRS`, `StandardSSD_LRS`, `Premium_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required unless using an existing OS Managed Disk by specifying `osManagedDiskId`.
         */
        storageAccountType?: pulumi.Input<string>;
        /**
         * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
         *
         * > **NOTE:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineOsDiskDiffDiskSettings {
        /**
         * Specifies the Ephemeral Disk Settings for the OS Disk. At this time the only possible value is `Local`. Changing this forces a new resource to be created.
         */
        option: pulumi.Input<string>;
        /**
         * Specifies where to store the Ephemeral Disk. Possible values are `CacheDisk`, `ResourceDisk` and `NvmeDisk`. Defaults to `CacheDisk`. Changing this forces a new resource to be created.
         *
         * > **Note:** `NvmeDisk` can only be used for v6 VMs in combination with a supported `sourceImageReference`. More information can be found [here](https://learn.microsoft.com/en-us/azure/virtual-machines/ephemeral-os-disks)
         */
        placement?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineOsImageNotification {
        /**
         * Length of time a notification to be sent to the VM on the instance metadata server till the VM gets OS upgraded. The only possible value is `PT15M`. Defaults to `PT15M`.
         */
        timeout?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachinePlan {
        /**
         * Specifies the Name of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the Product of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the Publisher of the Marketplace Image this Virtual Machine should be created from. Changing this forces a new resource to be created.
         *
         * > **NOTE:** If you use the `plan` block with one of Microsoft's marketplace images (e.g. `publisher = "MicrosoftWindowsServer"`). This may prevent the purchase of the offer. An example Azure API error: `The Offer: 'WindowsServer' cannot be purchased by subscription: '12345678-12234-5678-9012-123456789012' as it is not to be sold in market: 'US'. Please choose a subscription which is associated with a different market.`
         */
        publisher: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetAdditionalCapabilities {
        /**
         * Should the capacity to enable Data Disks of the `UltraSSD_LRS` storage account type be supported on this Virtual Machine Scale Set? Possible values are `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetAdditionalUnattendContent {
        /**
         * The XML formatted content that is added to the unattend.xml file for the specified path and component. Changing this forces a new resource to be created.
         */
        content: pulumi.Input<string>;
        /**
         * The name of the setting to which the content applies. Possible values are `AutoLogon` and `FirstLogonCommands`. Changing this forces a new resource to be created.
         */
        setting: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetAutomaticInstanceRepair {
        /**
         * The repair action that will be used for repairing unhealthy virtual machines in the scale set. Possible values include `Replace`, `Restart`, `Reimage`.
         *
         * > **Note:** Once the `action` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         *
         * > **Note:** If you wish to update the repair `action` of an existing `automaticInstanceRepair` policy, you must first `disable` the `automaticInstanceRepair` policy before you can re-enable the `automaticInstanceRepair` policy with the new repair `action` defined.
         */
        action?: pulumi.Input<string>;
        /**
         * Should the automatic instance repair be enabled on this Virtual Machine Scale Set?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Amount of time for which automatic repairs will be delayed. The grace period starts right after the VM is found unhealthy. Possible values are between `10` and `90` minutes. The time duration should be specified in `ISO 8601` format (e.g. `PT10M` to `PT90M`).
         *
         * > **Note:** Once the `gracePeriod` field has been set it will always return the last value it was assigned if it is removed from the configuration file.
         */
        gracePeriod?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetAutomaticOsUpgradePolicy {
        /**
         * Should automatic rollbacks be disabled?
         */
        disableAutomaticRollback: pulumi.Input<boolean>;
        /**
         * Should OS Upgrades automatically be applied to Scale Set instances in a rolling fashion when a newer version of the OS Image becomes available?
         */
        enableAutomaticOsUpgrade: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetBootDiagnostics {
        /**
         * The Primary/Secondary Endpoint for the Azure Storage Account which should be used to store Boot Diagnostics, including Console Output and Screenshots from the Hypervisor.
         *
         * > **Note:** Passing a null value will utilize a Managed Storage Account to store Boot Diagnostics
         */
        storageAccountUri?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetDataDisk {
        /**
         * The type of Caching which should be used for this Data Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * The create option which should be used for this Data Disk. Possible values are `Empty` and `FromImage`. Defaults to `Empty`. (`FromImage` should only be used if the source image includes data disks).
         */
        createOption?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this Data Disk. Changing this forces a new resource to be created.
         *
         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         *
         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The size of the Data Disk which should be created.
         */
        diskSizeGb: pulumi.Input<number>;
        /**
         * The Logical Unit Number of the Data Disk, which must be unique within the Virtual Machine.
         */
        lun: pulumi.Input<number>;
        /**
         * The name of the Data Disk.
         */
        name?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this Data Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS` and `UltraSSD_LRS`.
         *
         * > **Note:** `UltraSSD_LRS` is only supported when `ultraSsdEnabled` within the `additionalCapabilities` block is enabled.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Specifies the Read-Write IOPS for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskIopsReadWrite?: pulumi.Input<number>;
        /**
         * Specifies the bandwidth in MB per second for this Data Disk. Only settable when `storageAccountType` is `PremiumV2_LRS` or `UltraSSD_LRS`.
         */
        ultraSsdDiskMbpsReadWrite?: pulumi.Input<number>;
        /**
         * Should Write Accelerator be enabled for this Data Disk? Defaults to `false`.
         *
         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetExtension {
        /**
         * Should the latest version of the Extension be used at Deployment Time, if one is available? This won't auto-update the extension on existing installation. Defaults to `true`.
         */
        autoUpgradeMinorVersion?: pulumi.Input<boolean>;
        /**
         * Should the Extension be automatically updated whenever the Publisher releases a new version of this VM Extension?
         */
        automaticUpgradeEnabled?: pulumi.Input<boolean>;
        /**
         * A value which, when different to the previous value can be used to force-run the Extension even if the Extension Configuration hasn't changed.
         */
        forceUpdateTag?: pulumi.Input<string>;
        /**
         * The name for the Virtual Machine Scale Set Extension.
         */
        name: pulumi.Input<string>;
        /**
         * A JSON String which specifies Sensitive Settings (such as Passwords) for the Extension.
         *
         * > **Note:** Keys within the `protectedSettings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
         */
        protectedSettings?: pulumi.Input<string>;
        /**
         * A `protectedSettingsFromKeyVault` block as defined below.
         *
         * > **Note:** `protectedSettingsFromKeyVault` cannot be used with `protectedSettings`
         */
        protectedSettingsFromKeyVault?: pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault>;
        /**
         * An ordered list of Extension names which this should be provisioned after.
         */
        provisionAfterExtensions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the Publisher of the Extension.
         */
        publisher: pulumi.Input<string>;
        /**
         * A JSON String which specifies Settings for the Extension.
         *
         * > **Note:** Keys within the `settings` block are notoriously case-sensitive, where the casing required (e.g. TitleCase vs snakeCase) depends on the Extension being used. Please refer to the documentation for the specific Virtual Machine Extension you're looking to use for more information.
         */
        settings?: pulumi.Input<string>;
        /**
         * Specifies the Type of the Extension.
         */
        type: pulumi.Input<string>;
        /**
         * Specifies the version of the extension to use, available versions can be found using the Azure CLI.
         */
        typeHandlerVersion: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetExtensionProtectedSettingsFromKeyVault {
        /**
         * The URL to the Key Vault Secret which stores the protected settings.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetGalleryApplication {
        /**
         * Specifies the URI to an Azure Blob that will replace the default configuration for the package if provided. Changing this forces a new resource to be created.
         */
        configurationBlobUri?: pulumi.Input<string>;
        /**
         * Specifies the order in which the packages have to be installed. Possible values are between `0` and `2147483647`. Defaults to `0`. Changing this forces a new resource to be created.
         */
        order?: pulumi.Input<number>;
        /**
         * Specifies a passthrough value for more generic context. This field can be any valid `string` value. Changing this forces a new resource to be created.
         */
        tag?: pulumi.Input<string>;
        /**
         * Specifies the Gallery Application Version resource ID. Changing this forces a new resource to be created.
         */
        versionId: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Windows Virtual Machine Scale Set.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Windows Virtual Machine Scale Set. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetNetworkInterface {
        /**
         * Specifies the auxiliary mode used to enable network high-performance feature on Network Virtual Appliances (NVAs). This feature offers competitive performance in Connections Per Second (CPS) optimization, along with improvements to handling large amounts of simultaneous connections. Possible values are `AcceleratedConnections` and `Floating`.
         *
         * > **Note:** `auxiliaryMode` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliaryMode?: pulumi.Input<string>;
        /**
         * Specifies the SKU used for the network high-performance feature on Network Virtual Appliances (NVAs). Possible values are `A1`, `A2`, `A4` and `A8`.
         *
         * > **Note:** `auxiliarySku` is in **Preview** and requires that the prerequisites are enabled - [more information can be found in the Azure documentation](https://learn.microsoft.com/azure/networking/nva-accelerated-connections#prerequisites).
         */
        auxiliarySku?: pulumi.Input<string>;
        /**
         * A list of IP Addresses of DNS Servers which should be assigned to the Network Interface.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Does this Network Interface support Accelerated Networking? Defaults to `false`.
         */
        enableAcceleratedNetworking?: pulumi.Input<boolean>;
        /**
         * Does this Network Interface support IP Forwarding? Defaults to `false`.
         */
        enableIpForwarding?: pulumi.Input<boolean>;
        /**
         * One or more `ipConfiguration` blocks as defined above.
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetNetworkInterfaceIpConfiguration>[]>;
        /**
         * The Name which should be used for this Network Interface. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of a Network Security Group which should be assigned to this Network Interface.
         */
        networkSecurityGroupId?: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration?
         *
         * > **Note:** If multiple `networkInterface` blocks are specified, one must be set to `primary`.
         */
        primary?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetNetworkInterfaceIpConfiguration {
        /**
         * A list of Backend Address Pools ID's from a Application Gateway which this Virtual Machine Scale Set should be connected to.
         */
        applicationGatewayBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Application Security Group ID's which this Virtual Machine Scale Set should be connected to.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Backend Address Pools ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
         *
         * > **Note:** When the Virtual Machine Scale Set is configured to have public IPs per instance are created with a load balancer, the SKU of the Virtual Machine instance IPs is determined by the SKU of the Virtual Machine Scale Sets Load Balancer (e.g. `Basic` or `Standard`). Alternatively, you may use the `publicIpPrefixId` field to generate instance-level IPs in a virtual machine scale set as well. The zonal properties of the prefix will be passed to the Virtual Machine instance IPs, though they will not be shown in the output. To view the public IP addresses assigned to the Virtual Machine Scale Sets Virtual Machine instances use the **az vmss list-instance-public-ips --resource-group `ResourceGroupName` --name `VirtualMachineScaleSetName`** CLI command.
         *
         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of NAT Rule ID's from a Load Balancer which this Virtual Machine Scale Set should be connected to.
         *
         * > **Note:** When using this field you'll also need to configure a Rule for the Load Balancer, and use a `dependsOn` between this resource and the Load Balancer Rule.
         */
        loadBalancerInboundNatRulesIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Name which should be used for this IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration for this Network Interface? Defaults to `false`.
         *
         * > **Note:** One `ipConfiguration` block must be marked as Primary for each Network Interface.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * A `publicIpAddress` block as defined below.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress>[]>;
        /**
         * The ID of the Subnet which this IP Configuration should be connected to.
         *
         * > **Note:** `subnetId` is required if `version` is set to `IPv4`.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this IP Configuration. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`.
         */
        version?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddress {
        /**
         * The Prefix which should be used for the Domain Name Label for each Virtual Machine Instance. Azure concatenates the Domain Name Label and Virtual Machine Index to create a unique Domain Name Label for each Virtual Machine.
         */
        domainNameLabel?: pulumi.Input<string>;
        /**
         * The Idle Timeout in Minutes for the Public IP Address. Possible values are in the range `4` to `32`.
         */
        idleTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * One or more `ipTag` blocks as defined above. Changing this forces a new resource to be created.
         */
        ipTags?: pulumi.Input<pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag>[]>;
        /**
         * The Name of the Public IP Address Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the Public IP Address Prefix from where Public IP Addresses should be allocated. Changing this forces a new resource to be created.
         *
         * > **Note:** This functionality is in Preview and must be opted into via `az feature register --namespace Microsoft.Network --name AllowBringYourOwnPublicIpAddress` and then `az provider register -n Microsoft.Network`.
         */
        publicIpPrefixId?: pulumi.Input<string>;
        /**
         * The Internet Protocol Version which should be used for this public IP address. Possible values are `IPv4` and `IPv6`. Defaults to `IPv4`. Changing this forces a new resource to be created.
         */
        version?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetNetworkInterfaceIpConfigurationPublicIpAddressIpTag {
        /**
         * The IP Tag associated with the Public IP, such as `SQL` or `Storage`. Changing this forces a new resource to be created.
         */
        tag: pulumi.Input<string>;
        /**
         * The Type of IP Tag, such as `FirstPartyUsage`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetOsDisk {
        /**
         * The Type of Caching which should be used for the Internal OS Disk. Possible values are `None`, `ReadOnly` and `ReadWrite`.
         */
        caching: pulumi.Input<string>;
        /**
         * A `diffDiskSettings` block as defined above. Changing this forces a new resource to be created.
         */
        diffDiskSettings?: pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetOsDiskDiffDiskSettings>;
        /**
         * The ID of the Disk Encryption Set which should be used to encrypt this OS Disk. Conflicts with `secureVmDiskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **Note:** The Disk Encryption Set must have the `Reader` Role Assignment scoped on the Key Vault - in addition to an Access Policy to the Key Vault
         *
         * > **Note:** Disk Encryption Sets are in Public Preview in a limited set of regions
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The Size of the Internal OS Disk in GB, if you wish to vary from the size used in the image this Virtual Machine Scale Set is sourced from.
         *
         * > **Note:** If specified this must be equal to or larger than the size of the Image the VM Scale Set is based on. When creating a larger disk than exists in the image you'll need to repartition the disk to use the remaining space.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The ID of the Disk Encryption Set which should be used to Encrypt the OS Disk when the Virtual Machine Scale Set is Confidential VMSS. Conflicts with `diskEncryptionSetId`. Changing this forces a new resource to be created.
         *
         * > **Note:** `secureVmDiskEncryptionSetId` can only be specified when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        secureVmDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Encryption Type when the Virtual Machine Scale Set is Confidential VMSS. Possible values are `VMGuestStateOnly` and `DiskWithVMGuestState`. Changing this forces a new resource to be created.
         *
         * > **Note:** `vtpmEnabled` must be set to `true` when `securityEncryptionType` is specified.
         *
         * > **Note:** `encryptionAtHostEnabled` cannot be set to `true` when `securityEncryptionType` is set to `DiskWithVMGuestState`.
         */
        securityEncryptionType?: pulumi.Input<string>;
        /**
         * The Type of Storage Account which should back this the Internal OS Disk. Possible values include `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS`, `Premium_LRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         */
        storageAccountType: pulumi.Input<string>;
        /**
         * Should Write Accelerator be Enabled for this OS Disk? Defaults to `false`.
         *
         * > **Note:** This requires that the `storageAccountType` is set to `Premium_LRS` and that `caching` is set to `None`.
         */
        writeAcceleratorEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetOsDiskDiffDiskSettings {
        /**
         * Specifies the Ephemeral Disk Settings for the OS Disk. At this time the only possible value is `Local`. Changing this forces a new resource to be created.
         */
        option: pulumi.Input<string>;
        /**
         * Specifies where to store the Ephemeral Disk. Possible values are `CacheDisk` and `ResourceDisk`. Defaults to `CacheDisk`. Changing this forces a new resource to be created.
         */
        placement?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetPlan {
        /**
         * Specifies the name of the image from the marketplace. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the image from the marketplace. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetRollingUpgradePolicy {
        /**
         * Should the Virtual Machine Scale Set ignore the Azure Zone boundaries when constructing upgrade batches? Possible values are `true` or `false`.
         */
        crossZoneUpgradesEnabled?: pulumi.Input<boolean>;
        /**
         * The maximum percent of total virtual machine instances that will be upgraded simultaneously by the rolling upgrade in one batch. As this is a maximum, unhealthy instances in previous or future batches can cause the percentage of instances in a batch to decrease to ensure higher reliability.
         */
        maxBatchInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of the total virtual machine instances in the scale set that can be simultaneously unhealthy, either as a result of being upgraded, or by being found in an unhealthy state by the virtual machine health checks before the rolling upgrade aborts. This constraint will be checked prior to starting any batch.
         */
        maxUnhealthyInstancePercent: pulumi.Input<number>;
        /**
         * The maximum percentage of upgraded virtual machine instances that can be found to be in an unhealthy state. This check will happen after each batch is upgraded. If this percentage is ever exceeded, the rolling update aborts.
         */
        maxUnhealthyUpgradedInstancePercent: pulumi.Input<number>;
        /**
         * Create new virtual machines to upgrade the scale set, rather than updating the existing virtual machines. Existing virtual machines will be deleted once the new virtual machines are created for each batch. Possible values are `true` or `false`.
         *
         * > **Note:** `overprovision` must be set to `false` when `maximumSurgeInstancesEnabled` is specified.
         */
        maximumSurgeInstancesEnabled?: pulumi.Input<boolean>;
        /**
         * The wait time between completing the update for all virtual machines in one batch and starting the next batch. The time duration should be specified in ISO 8601 format.
         */
        pauseTimeBetweenBatches: pulumi.Input<string>;
        /**
         * Upgrade all unhealthy instances in a scale set before any healthy instances. Possible values are `true` or `false`.
         */
        prioritizeUnhealthyInstancesEnabled?: pulumi.Input<boolean>;
    }
    interface WindowsVirtualMachineScaleSetScaleIn {
        /**
         * Should the virtual machines chosen for removal be force deleted when the virtual machine scale set is being scaled-in? Possible values are `true` or `false`. Defaults to `false`.
         */
        forceDeletionEnabled?: pulumi.Input<boolean>;
        /**
         * The scale-in policy rule that decides which virtual machines are chosen for removal when a Virtual Machine Scale Set is scaled in. Possible values for the scale-in policy rules are `Default`, `NewestVM` and `OldestVM`, defaults to `Default`. For more information about scale in policy, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-scale-in-policy).
         */
        rule?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetSecret {
        /**
         * One or more `certificate` blocks as defined above.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.WindowsVirtualMachineScaleSetSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetSecretCertificate {
        /**
         * The certificate store on the Virtual Machine where the certificate should be added.
         */
        store: pulumi.Input<string>;
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        url: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetSourceImageReference {
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines.
         */
        version: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetSpotRestore {
        /**
         * Should the Spot-Try-Restore feature be enabled? The Spot-Try-Restore feature will attempt to automatically restore the evicted Spot Virtual Machine Scale Set VM instances opportunistically based on capacity availability and pricing constraints. Possible values are `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The length of time that the Virtual Machine Scale Set should attempt to restore the Spot VM instances which have been evicted. The time duration should be between `15` minutes and `120` minutes (inclusive). The time duration should be specified in the ISO 8601 format. Defaults to `PT1H`. Changing this forces a new resource to be created.
         */
        timeout?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetTerminationNotification {
        /**
         * Should the termination notification be enabled on this Virtual Machine Scale Set?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Length of time (in minutes, between 5 and 15) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
         *
         * > **Note:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
         */
        timeout?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineScaleSetWinrmListener {
        /**
         * The Secret URL of a Key Vault Certificate, which must be specified when `protocol` is set to `Https`. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        certificateUrl?: pulumi.Input<string>;
        /**
         * The Protocol of the WinRM Listener. Possible values are `Http` and `Https`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineSecret {
        /**
         * One or more `certificate` blocks as defined above.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.compute.WindowsVirtualMachineSecretCertificate>[]>;
        /**
         * The ID of the Key Vault from which all Secrets should be sourced.
         */
        keyVaultId: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineSecretCertificate {
        /**
         * The certificate store on the Virtual Machine where the certificate should be added.
         */
        store: pulumi.Input<string>;
        /**
         * The Secret URL of a Key Vault Certificate.
         *
         * > **NOTE:** This can be sourced from the `secretId` field within the `azure.keyvault.Certificate` Resource.
         */
        url: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineSourceImageReference {
        /**
         * Specifies the offer of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * Specifies the publisher of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the SKU of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the image used to create the virtual machines. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineTerminationNotification {
        /**
         * Should the termination notification be enabled on this Virtual Machine?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Length of time (in minutes, between `5` and `15`) a notification to be sent to the VM on the instance metadata server till the VM gets deleted. The time duration should be specified in ISO 8601 format. Defaults to `PT5M`.
         *
         * > **NOTE:** For more information about the termination notification, please [refer to this doc](https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-terminate-notification).
         */
        timeout?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineWinrmListener {
        /**
         * The Secret URL of a Key Vault Certificate, which must be specified when `protocol` is set to `Https`. Changing this forces a new resource to be created.
         */
        certificateUrl?: pulumi.Input<string>;
        /**
         * Specifies the protocol of listener. Possible values are `Http` or `Https`. Changing this forces a new resource to be created.
         */
        protocol: pulumi.Input<string>;
    }
}
export declare namespace confidentialledger {
    interface LedgerAzureadBasedServicePrincipal {
        /**
         * Specifies the Ledger Role to grant this AzureAD Service Principal. Possible values are `Administrator`, `Contributor` and `Reader`.
         */
        ledgerRoleName: pulumi.Input<string>;
        /**
         * Specifies the Principal ID of the AzureAD Service Principal.
         */
        principalId: pulumi.Input<string>;
        /**
         * Specifies the Tenant ID for this AzureAD Service Principal.
         */
        tenantId: pulumi.Input<string>;
    }
    interface LedgerCertificateBasedSecurityPrincipal {
        /**
         * Specifies the Ledger Role to grant this Certificate Security Principal. Possible values are `Administrator`, `Contributor` and `Reader`.
         */
        ledgerRoleName: pulumi.Input<string>;
        /**
         * The public key, in PEM format, of the certificate used by this identity to authenticate with the Confidential Ledger.
         */
        pemPublicKey: pulumi.Input<string>;
    }
}
export declare namespace config {
}
export declare namespace consumption {
    interface BudgetManagementGroupFilter {
        /**
         * One or more `dimension` blocks as defined below to filter the budget on.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetManagementGroupFilterDimension>[]>;
        /**
         * One or more `tag` blocks as defined below to filter the budget on.
         */
        tags?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetManagementGroupFilterTag>[]>;
    }
    interface BudgetManagementGroupFilterDimension {
        /**
         * The name of the column to use for the filter. The allowed values are `ChargeType`, `Frequency`, `InvoiceId`, `Meter`, `MeterCategory`, `MeterSubCategory`, `PartNumber`, `PricingModel`, `Product`, `ProductOrderId`, `ProductOrderName`, `PublisherType`, `ReservationId`, `ReservationName`, `ResourceGroupName`, `ResourceGuid`, `ResourceId`, `ResourceLocation`, `ResourceType`, `ServiceFamily`, `ServiceName`, `SubscriptionID`, `SubscriptionName`, `UnitOfMeasure`.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the column.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetManagementGroupFilterTag {
        /**
         * The name of the tag to use for the filter.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the tag.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetManagementGroupNotification {
        /**
         * Specifies a list of email addresses to send the budget notification to when the threshold is exceeded.
         */
        contactEmails: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the notification be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The comparison operator for the notification. Must be one of `EqualTo`, `GreaterThan`, or `GreaterThanOrEqualTo`.
         */
        operator: pulumi.Input<string>;
        /**
         * Threshold value associated with a notification. Notification is sent when the cost exceeded the threshold. It is always percent and has to be between 0 and 1000.
         */
        threshold: pulumi.Input<number>;
        /**
         * The type of threshold for the notification. This determines whether the notification is triggered by forecasted costs or actual costs. The allowed values are `Actual` and `Forecasted`. Default is `Actual`.
         */
        thresholdType?: pulumi.Input<string>;
    }
    interface BudgetManagementGroupTimePeriod {
        /**
         * The end date for the budget. If not set this will be 10 years after the start date.
         */
        endDate?: pulumi.Input<string>;
        /**
         * The start date for the budget. The start date must be first of the month and should be less than the end date. Budget start date must be on or after June 1, 2017. Future start date should not be more than twelve months. Past start date should be selected within the timegrain period. Changing this forces a new resource to be created.
         */
        startDate: pulumi.Input<string>;
    }
    interface BudgetResourceGroupFilter {
        /**
         * One or more `dimension` blocks as defined below to filter the budget on.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetResourceGroupFilterDimension>[]>;
        /**
         * One or more `tag` blocks as defined below to filter the budget on.
         */
        tags?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetResourceGroupFilterTag>[]>;
    }
    interface BudgetResourceGroupFilterDimension {
        /**
         * The name of the column to use for the filter. The allowed values are `ChargeType`, `Frequency`, `InvoiceId`, `Meter`, `MeterCategory`, `MeterSubCategory`, `PartNumber`, `PricingModel`, `Product`, `ProductOrderId`, `ProductOrderName`, `PublisherType`, `ReservationId`, `ReservationName`, `ResourceGroupName`, `ResourceGuid`, `ResourceId`, `ResourceLocation`, `ResourceType`, `ServiceFamily`, `ServiceName`, `SubscriptionID`, `SubscriptionName`, `UnitOfMeasure`.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the column.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetResourceGroupFilterTag {
        /**
         * The name of the tag to use for the filter.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the tag.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetResourceGroupNotification {
        /**
         * Specifies a list of email addresses to send the budget notification to when the threshold is exceeded.
         */
        contactEmails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Action Group IDs to send the budget notification to when the threshold is exceeded.
         */
        contactGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of contact roles to send the budget notification to when the threshold is exceeded.
         */
        contactRoles?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the notification be enabled? Defaults to `true`.
         *
         * > **Note:** A `notification` block cannot have all of `contactEmails`, `contactRoles`, and `contactGroups` empty. This means that at least one of the three must be specified.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The comparison operator for the notification. Must be one of `EqualTo`, `GreaterThan`, or `GreaterThanOrEqualTo`.
         */
        operator: pulumi.Input<string>;
        /**
         * Threshold value associated with a notification. Notification is sent when the cost exceeded the threshold. It is always percent and has to be between 0 and 1000.
         */
        threshold: pulumi.Input<number>;
        /**
         * The type of threshold for the notification. This determines whether the notification is triggered by forecasted costs or actual costs. The allowed values are `Actual` and `Forecasted`. Default is `Actual`.
         */
        thresholdType?: pulumi.Input<string>;
    }
    interface BudgetResourceGroupTimePeriod {
        /**
         * The end date for the budget. If not set this will be 10 years after the start date.
         */
        endDate?: pulumi.Input<string>;
        /**
         * The start date for the budget. The start date must be first of the month and should be less than the end date. Budget start date must be on or after June 1, 2017. Future start date should not be more than twelve months. Past start date should be selected within the timegrain period. Changing this forces a new Resource Group Consumption Budget to be created.
         */
        startDate: pulumi.Input<string>;
    }
    interface BudgetSubscriptionFilter {
        /**
         * One or more `dimension` blocks as defined below to filter the budget on.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetSubscriptionFilterDimension>[]>;
        /**
         * One or more `tag` blocks as defined below to filter the budget on.
         */
        tags?: pulumi.Input<pulumi.Input<inputs.consumption.BudgetSubscriptionFilterTag>[]>;
    }
    interface BudgetSubscriptionFilterDimension {
        /**
         * The name of the column to use for the filter. The allowed values are `ChargeType`, `Frequency`, `InvoiceId`, `Meter`, `MeterCategory`, `MeterSubCategory`, `PartNumber`, `PricingModel`, `Product`, `ProductOrderId`, `ProductOrderName`, `PublisherType`, `ReservationId`, `ReservationName`, `ResourceGroupName`, `ResourceGuid`, `ResourceId`, `ResourceLocation`, `ResourceType`, `ServiceFamily`, `ServiceName`, `SubscriptionID`, `SubscriptionName`, `UnitOfMeasure`.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the column.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetSubscriptionFilterTag {
        /**
         * The name of the tag to use for the filter.
         */
        name: pulumi.Input<string>;
        /**
         * The operator to use for comparison. The allowed values are `In`. Defaults to `In`.
         */
        operator?: pulumi.Input<string>;
        /**
         * Specifies a list of values for the tag.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BudgetSubscriptionNotification {
        /**
         * Specifies a list of email addresses to send the budget notification to when the threshold is exceeded.
         */
        contactEmails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Action Group IDs to send the budget notification to when the threshold is exceeded.
         */
        contactGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of contact roles to send the budget notification to when the threshold is exceeded.
         */
        contactRoles?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the notification be enabled? Defaults to `true`.
         *
         * > **Note:** A `notification` block cannot have all of `contactEmails`, `contactRoles`, and `contactGroups` empty. This means that at least one of the three must be specified.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The comparison operator for the notification. Must be one of `EqualTo`, `GreaterThan`, or `GreaterThanOrEqualTo`.
         */
        operator: pulumi.Input<string>;
        /**
         * Threshold value associated with a notification. Notification is sent when the cost exceeded the threshold. It is always percent and has to be between 0 and 1000.
         */
        threshold: pulumi.Input<number>;
        /**
         * The type of threshold for the notification. This determines whether the notification is triggered by forecasted costs or actual costs. The allowed values are `Actual` and `Forecasted`. Default is `Actual`.
         */
        thresholdType?: pulumi.Input<string>;
    }
    interface BudgetSubscriptionTimePeriod {
        /**
         * The end date for the budget. If not set this will be 10 years after the start date.
         */
        endDate?: pulumi.Input<string>;
        /**
         * The start date for the budget. The start date must be first of the month and should be less than the end date. Budget start date must be on or after June 1, 2017. Future start date should not be more than twelve months. Past start date should be selected within the timegrain period. Changing this forces a new Subscription Consumption Budget to be created.
         */
        startDate: pulumi.Input<string>;
    }
}
export declare namespace containerapp {
    interface AppDapr {
        /**
         * The Dapr Application Identifier.
         */
        appId: pulumi.Input<string>;
        /**
         * The port which the application is listening on. This is the same as the `ingress` port.
         */
        appPort?: pulumi.Input<number>;
        /**
         * The protocol for the app. Possible values include `http` and `grpc`. Defaults to `http`.
         */
        appProtocol?: pulumi.Input<string>;
    }
    interface AppIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign. Required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of managed identity to assign. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface AppIngress {
        /**
         * Should this ingress allow insecure connections?
         */
        allowInsecureConnections?: pulumi.Input<boolean>;
        /**
         * The client certificate mode for the Ingress. Possible values are `require`, `accept`, and `ignore`.
         */
        clientCertificateMode?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.containerapp.AppIngressCors>;
        /**
         * One or more `customDomain` block as detailed below.
         */
        customDomains?: pulumi.Input<pulumi.Input<inputs.containerapp.AppIngressCustomDomain>[]>;
        /**
         * The exposed port on the container for the Ingress traffic.
         *
         * > **Note:** `exposedPort` can only be specified when `transport` is set to `tcp`.
         */
        exposedPort?: pulumi.Input<number>;
        /**
         * Are connections to this Ingress from outside the Container App Environment enabled? Defaults to `false`.
         */
        externalEnabled?: pulumi.Input<boolean>;
        /**
         * The FQDN of the ingress.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * One or more `ipSecurityRestriction` blocks for IP-filtering rules as defined below.
         */
        ipSecurityRestrictions?: pulumi.Input<pulumi.Input<inputs.containerapp.AppIngressIpSecurityRestriction>[]>;
        /**
         * The target port on the container for the Ingress traffic.
         */
        targetPort: pulumi.Input<number>;
        /**
         * One or more `trafficWeight` blocks as detailed below.
         */
        trafficWeights: pulumi.Input<pulumi.Input<inputs.containerapp.AppIngressTrafficWeight>[]>;
        /**
         * The transport method for the Ingress. Possible values are `auto`, `http`, `http2` and `tcp`. Defaults to `auto`.
         *
         * > **Note:** if `transport` is set to `tcp`, `exposedPort` and `targetPort` should be set at the same time.
         */
        transport?: pulumi.Input<string>;
    }
    interface AppIngressCors {
        /**
         * Whether user credentials are allowed in the cross-origin request is enabled. Defaults to `false`.
         */
        allowCredentialsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the list of request headers that are permitted in the actual request.
         */
        allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the list of HTTP methods are allowed when accessing the resource in a cross-origin request.
         */
        allowedMethods?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the list of origins that are allowed to make cross-origin calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the list of headers exposed to the browser in the response to a cross-origin request.
         */
        exposedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the number of seconds that the browser can cache the results of a preflight request.
         */
        maxAgeInSeconds?: pulumi.Input<number>;
    }
    interface AppIngressCustomDomain {
        /**
         * The Binding type.
         */
        certificateBindingType?: pulumi.Input<string>;
        /**
         * The ID of the Container App Environment Certificate.
         */
        certificateId?: pulumi.Input<string>;
        /**
         * The name for this Container App. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface AppIngressIpSecurityRestriction {
        /**
         * The IP-filter action. `Allow` or `Deny`.
         *
         * > **Note:** The `action` types in an all `ipSecurityRestriction` blocks must be the same for the `ingress`, mixing `Allow` and `Deny` rules is not currently supported by the service.
         */
        action: pulumi.Input<string>;
        /**
         * Describe the IP restriction rule that is being sent to the container-app.
         */
        description?: pulumi.Input<string>;
        /**
         * The incoming IP address or range of IP addresses (in CIDR notation).
         */
        ipAddressRange: pulumi.Input<string>;
        /**
         * Name for the IP restriction rule.
         */
        name: pulumi.Input<string>;
    }
    interface AppIngressTrafficWeight {
        /**
         * The label to apply to the revision as a name prefix for routing traffic.
         */
        label?: pulumi.Input<string>;
        /**
         * This traffic Weight applies to the latest stable Container Revision. At most only one `trafficWeight` block can have the `latestRevision` set to `true`.
         */
        latestRevision?: pulumi.Input<boolean>;
        /**
         * The percentage of traffic which should be sent this revision.
         *
         * > **Note:** The cumulative values for `weight` must equal 100 exactly and explicitly, no default weights are assumed.
         */
        percentage: pulumi.Input<number>;
        /**
         * The suffix string to which this `trafficWeight` applies.
         *
         * > **Note:** If `latestRevision` is `false`, the `revisionSuffix` shall be specified.
         */
        revisionSuffix?: pulumi.Input<string>;
    }
    interface AppRegistry {
        /**
         * Resource ID for the User Assigned Managed identity to use when pulling from the Container Registry.
         *
         * > **Note:** The Resource ID must be of a User Assigned Managed identity defined in an `identity` block.
         */
        identity?: pulumi.Input<string>;
        /**
         * The name of the Secret Reference containing the password value for this user on the Container Registry, `username` must also be supplied.
         */
        passwordSecretName?: pulumi.Input<string>;
        /**
         * The hostname for the Container Registry.
         *
         * The authentication details must also be supplied, `identity` and `username`/`passwordSecretName` are mutually exclusive.
         */
        server: pulumi.Input<string>;
        /**
         * The username to use for this Container Registry, `passwordSecretName` must also be supplied..
         */
        username?: pulumi.Input<string>;
    }
    interface AppSecret {
        /**
         * The identity to use for accessing the Key Vault secret reference. This can either be the Resource ID of a User Assigned Identity, or `System` for the System Assigned Identity.
         *
         * !> **Note:** `identity` must be used together with `keyVaultSecretId`
         */
        identity?: pulumi.Input<string>;
        /**
         * The ID of a Key Vault secret. This can be a versioned or version-less ID.
         *
         * !> **Note:** When using `keyVaultSecretId`, `ignoreChanges` should be used to ignore any changes to `value`.
         */
        keyVaultSecretId?: pulumi.Input<string>;
        /**
         * The secret name.
         */
        name: pulumi.Input<string>;
        /**
         * The value for this secret.
         *
         * !> **Note:** `value` will be ignored if `keyVaultSecretId` and `identity` are provided.
         */
        value?: pulumi.Input<string>;
    }
    interface AppTemplate {
        /**
         * One or more `azureQueueScaleRule` blocks as defined below.
         */
        azureQueueScaleRules?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateAzureQueueScaleRule>[]>;
        /**
         * One or more `container` blocks as detailed below.
         */
        containers: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainer>[]>;
        /**
         * The number of seconds to wait before scaling down the number of instances again. Defaults to `300`.
         */
        cooldownPeriodInSeconds?: pulumi.Input<number>;
        /**
         * One or more `customScaleRule` blocks as defined below.
         */
        customScaleRules?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateCustomScaleRule>[]>;
        /**
         * One or more `httpScaleRule` blocks as defined below.
         */
        httpScaleRules?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateHttpScaleRule>[]>;
        /**
         * The definition of an init container that is part of the group as documented in the `initContainer` block below.
         */
        initContainers?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateInitContainer>[]>;
        /**
         * The maximum number of replicas for this container.
         */
        maxReplicas?: pulumi.Input<number>;
        /**
         * The minimum number of replicas for this container.
         */
        minReplicas?: pulumi.Input<number>;
        /**
         * The interval in seconds used for polling KEDA. Defaults to `30`.
         */
        pollingIntervalInSeconds?: pulumi.Input<number>;
        /**
         * The suffix for the revision. This value must be unique for the lifetime of the Resource. If omitted the service will use a hash function to create one.
         */
        revisionSuffix?: pulumi.Input<string>;
        /**
         * One or more `tcpScaleRule` blocks as defined below.
         */
        tcpScaleRules?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateTcpScaleRule>[]>;
        /**
         * The time in seconds after the container is sent the termination signal before the process if forcibly killed.
         */
        terminationGracePeriodSeconds?: pulumi.Input<number>;
        /**
         * A `volume` block as detailed below.
         */
        volumes?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateVolume>[]>;
    }
    interface AppTemplateAzureQueueScaleRule {
        /**
         * One or more `authentication` blocks as defined below.
         */
        authentications: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateAzureQueueScaleRuleAuthentication>[]>;
        /**
         * The name of the Scaling Rule
         */
        name: pulumi.Input<string>;
        /**
         * The value of the length of the queue to trigger scaling actions.
         */
        queueLength: pulumi.Input<number>;
        /**
         * The name of the Azure Queue
         */
        queueName: pulumi.Input<string>;
    }
    interface AppTemplateAzureQueueScaleRuleAuthentication {
        /**
         * The name of the Container App Secret to use for this Scale Rule Authentication.
         */
        secretName: pulumi.Input<string>;
        /**
         * The Trigger Parameter name to use the supply the value retrieved from the `secretName`.
         */
        triggerParameter: pulumi.Input<string>;
    }
    interface AppTemplateContainer {
        /**
         * A list of extra arguments to pass to the container.
         */
        args?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A command to pass to the container to override the default. This is provided as a list of command line elements without spaces.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The amount of vCPU to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        cpu: pulumi.Input<number>;
        /**
         * One or more `env` blocks as detailed below.
         */
        envs?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerEnv>[]>;
        /**
         * The amount of ephemeral storage available to the Container App.
         *
         * > **Note:** `ephemeralStorage` is currently in preview and not configurable at this time.
         */
        ephemeralStorage?: pulumi.Input<string>;
        /**
         * The image to use to create the container.
         */
        image: pulumi.Input<string>;
        /**
         * A `livenessProbe` block as detailed below.
         */
        livenessProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerLivenessProbe>[]>;
        /**
         * The amount of memory to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        memory: pulumi.Input<string>;
        /**
         * The name of the container
         */
        name: pulumi.Input<string>;
        /**
         * A `readinessProbe` block as detailed below.
         */
        readinessProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerReadinessProbe>[]>;
        /**
         * A `startupProbe` block as detailed below.
         */
        startupProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerStartupProbe>[]>;
        /**
         * A `volumeMounts` block as detailed below.
         */
        volumeMounts?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerVolumeMount>[]>;
    }
    interface AppTemplateContainerEnv {
        /**
         * The name of the environment variable for the container.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the secret that contains the value for this environment variable.
         */
        secretName?: pulumi.Input<string>;
        /**
         * The value for this environment variable.
         *
         * > **Note:** This value is ignored if `secretName` is used
         */
        value?: pulumi.Input<string>;
    }
    interface AppTemplateContainerLivenessProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `30`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerLivenessProbeHeader>[]>;
        /**
         * The probe hostname. Defaults to the pod IP address. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The number of seconds elapsed after the container has started before the probe is initiated. Possible values are between `0` and `60`. Defaults to `1` seconds.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are in the range `1` - `240`. Defaults to `10`.
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use with the `host` for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The time in seconds after the container is sent the termination signal before the process if forcibly killed.
         */
        terminationGracePeriodSeconds?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface AppTemplateContainerLivenessProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface AppTemplateContainerReadinessProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `48`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerReadinessProbeHeader>[]>;
        /**
         * The probe hostname. Defaults to the pod IP address. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The number of seconds elapsed after the container has started before the probe is initiated. Possible values are between `0` and `60`. Defaults to `0` seconds.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are between `1` and `240`. Defaults to `10`
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The number of consecutive successful responses required to consider this probe as successful. Possible values are between `1` and `10`. Defaults to `3`.
         */
        successCountThreshold?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface AppTemplateContainerReadinessProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface AppTemplateContainerStartupProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `240`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateContainerStartupProbeHeader>[]>;
        /**
         * The value for the host header which should be sent with this probe. If unspecified, the IP Address of the Pod is used as the host header. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The number of seconds elapsed after the container has started before the probe is initiated. Possible values are between `0` and `60`. Defaults to `0` seconds.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are between `1` and `240`. Defaults to `10`
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use with the `host` for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The time in seconds after the container is sent the termination signal before the process if forcibly killed.
         */
        terminationGracePeriodSeconds?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface AppTemplateContainerStartupProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface AppTemplateContainerVolumeMount {
        /**
         * The name of the Volume to be mounted in the container.
         */
        name: pulumi.Input<string>;
        /**
         * The path in the container at which to mount this volume.
         */
        path: pulumi.Input<string>;
        /**
         * The sub path of the volume to be mounted in the container.
         */
        subPath?: pulumi.Input<string>;
    }
    interface AppTemplateCustomScaleRule {
        /**
         * Zero or more `authentication` blocks as defined below.
         *
         * * `ìdentity_id`- (Optional) Resource ID for the System or User Assigned Managed identity to use when executing the scale rule.
         */
        authentications?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateCustomScaleRuleAuthentication>[]>;
        /**
         * The Custom rule type. Possible values include: `activemq`, `artemis-queue`, `kafka`, `pulsar`, `aws-cloudwatch`, `aws-dynamodb`, `aws-dynamodb-streams`, `aws-kinesis-stream`, `aws-sqs-queue`, `azure-app-insights`, `azure-blob`, `azure-data-explorer`, `azure-eventhub`, `azure-log-analytics`, `azure-monitor`, `azure-pipelines`, `azure-servicebus`, `azure-queue`, `cassandra`, `cpu`, `cron`, `datadog`, `elasticsearch`, `external`, `external-push`, `gcp-stackdriver`, `gcp-storage`, `gcp-pubsub`, `graphite`, `http`, `huawei-cloudeye`, `ibmmq`, `influxdb`, `kubernetes-workload`, `liiklus`, `memory`, `metrics-api`, `mongodb`, `mssql`, `mysql`, `nats-jetstream`, `stan`, `tcp`, `new-relic`, `openstack-metric`, `openstack-swift`, `postgresql`, `predictkube`, `prometheus`, `rabbitmq`, `redis`, `redis-cluster`, `redis-sentinel`, `redis-streams`, `redis-cluster-streams`, `redis-sentinel-streams`, `selenium-grid`,`solace-event-queue`, and `github-runner`.
         */
        customRuleType: pulumi.Input<string>;
        /**
         * ID of the System or User Managed Identity used to execute scale rule.
         */
        identityId?: pulumi.Input<string>;
        /**
         * A map of string key-value pairs to configure the Custom Scale Rule.
         */
        metadata: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of the Scaling Rule
         */
        name: pulumi.Input<string>;
    }
    interface AppTemplateCustomScaleRuleAuthentication {
        /**
         * The name of the Container App Secret to use for this Scale Rule Authentication.
         */
        secretName: pulumi.Input<string>;
        /**
         * The Trigger Parameter name to use the supply the value retrieved from the `secretName`.
         */
        triggerParameter: pulumi.Input<string>;
    }
    interface AppTemplateHttpScaleRule {
        /**
         * Zero or more `authentication` blocks as defined below.
         */
        authentications?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateHttpScaleRuleAuthentication>[]>;
        /**
         * The number of concurrent requests to trigger scaling.
         */
        concurrentRequests: pulumi.Input<string>;
        /**
         * The name of the Scaling Rule
         */
        name: pulumi.Input<string>;
    }
    interface AppTemplateHttpScaleRuleAuthentication {
        /**
         * The name of the Container App Secret to use for this Scale Rule Authentication.
         */
        secretName: pulumi.Input<string>;
        /**
         * The Trigger Parameter name to use the supply the value retrieved from the `secretName`.
         */
        triggerParameter?: pulumi.Input<string>;
    }
    interface AppTemplateInitContainer {
        /**
         * A list of extra arguments to pass to the container.
         */
        args?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A command to pass to the container to override the default. This is provided as a list of command line elements without spaces.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The amount of vCPU to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        cpu?: pulumi.Input<number>;
        /**
         * One or more `env` blocks as detailed below.
         */
        envs?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateInitContainerEnv>[]>;
        /**
         * The amount of ephemeral storage available to the Container App.
         *
         * > **Note:** `ephemeralStorage` is currently in preview and not configurable at this time.
         */
        ephemeralStorage?: pulumi.Input<string>;
        /**
         * The image to use to create the container.
         */
        image: pulumi.Input<string>;
        /**
         * The amount of memory to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        memory?: pulumi.Input<string>;
        /**
         * The name of the container
         */
        name: pulumi.Input<string>;
        /**
         * A `volumeMounts` block as detailed below.
         */
        volumeMounts?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateInitContainerVolumeMount>[]>;
    }
    interface AppTemplateInitContainerEnv {
        /**
         * The name of the environment variable for the container.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the secret that contains the value for this environment variable.
         */
        secretName?: pulumi.Input<string>;
        /**
         * The value for this environment variable.
         *
         * > **Note:** This value is ignored if `secretName` is used
         */
        value?: pulumi.Input<string>;
    }
    interface AppTemplateInitContainerVolumeMount {
        /**
         * The name of the Volume to be mounted in the container.
         */
        name: pulumi.Input<string>;
        /**
         * The path in the container at which to mount this volume.
         */
        path: pulumi.Input<string>;
        /**
         * The sub path of the volume to be mounted in the container.
         */
        subPath?: pulumi.Input<string>;
    }
    interface AppTemplateTcpScaleRule {
        /**
         * Zero or more `authentication` blocks as defined below.
         */
        authentications?: pulumi.Input<pulumi.Input<inputs.containerapp.AppTemplateTcpScaleRuleAuthentication>[]>;
        /**
         * The number of concurrent requests to trigger scaling.
         */
        concurrentRequests: pulumi.Input<string>;
        /**
         * The name of the Scaling Rule
         */
        name: pulumi.Input<string>;
    }
    interface AppTemplateTcpScaleRuleAuthentication {
        /**
         * The name of the Container App Secret to use for this Scale Rule Authentication.
         */
        secretName: pulumi.Input<string>;
        /**
         * The Trigger Parameter name to use the supply the value retrieved from the `secretName`.
         */
        triggerParameter?: pulumi.Input<string>;
    }
    interface AppTemplateVolume {
        /**
         * Mount options used while mounting the AzureFile. Must be a comma-separated string e.g. `dir_mode=0751,file_mode=0751`.
         */
        mountOptions?: pulumi.Input<string>;
        /**
         * The name of the volume.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the `AzureFile` storage.
         */
        storageName?: pulumi.Input<string>;
        /**
         * The type of storage volume. Possible values are `AzureFile`, `EmptyDir`, `NfsAzureFile` and `Secret`. Defaults to `EmptyDir`.
         */
        storageType?: pulumi.Input<string>;
    }
    interface EnvironmentCertificateCertificateKeyVault {
        /**
         * The managed identity to authenticate with Azure Key Vault. Possible values are the resource ID of user-assigned identity, and `System` for system-assigned identity. Defaults to `System`. Changing this forces a new resource to be created.
         *
         * > **Note:** Please make sure [required permissions](https://learn.microsoft.com/en-us/azure/container-apps/key-vault-certificates-manage) are correctly configured for your Key Vault and managed identity.
         */
        identity?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret containing the certificate. Changing this forces a new resource to be created.
         */
        keyVaultSecretId: pulumi.Input<string>;
    }
    interface EnvironmentDaprComponentMetadata {
        /**
         * The name of the Metadata configuration item.
         */
        name: pulumi.Input<string>;
        /**
         * The name of a secret specified in the `secrets` block that contains the value for this metadata configuration item.
         */
        secretName?: pulumi.Input<string>;
        /**
         * The value for this metadata configuration item.
         */
        value?: pulumi.Input<string>;
    }
    interface EnvironmentDaprComponentSecret {
        /**
         * The identity to use for accessing key vault reference. Possible values are the Resource ID of a User Assigned Managed Identity, or `System` to use the System Assigned Managed Identity.
         */
        identity?: pulumi.Input<string>;
        /**
         * The Key Vault Secret ID.
         */
        keyVaultSecretId?: pulumi.Input<string>;
        /**
         * The Secret name.
         */
        name: pulumi.Input<string>;
        /**
         * The value for this secret.
         */
        value?: pulumi.Input<string>;
    }
    interface EnvironmentIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign. Required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of managed identity to assign. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface EnvironmentWorkloadProfile {
        /**
         * The maximum number of instances of workload profile that can be deployed in the Container App Environment.
         */
        maximumCount?: pulumi.Input<number>;
        /**
         * The minimum number of instances of workload profile that can be deployed in the Container App Environment.
         */
        minimumCount?: pulumi.Input<number>;
        /**
         * The name of the workload profile.
         */
        name: pulumi.Input<string>;
        /**
         * Workload profile type for the workloads to run on. Possible values include `Consumption`, `Consumption-GPU-NC24-A100`, `Consumption-GPU-NC8as-T4`, `D4`, `D8`, `D16`, `D32`, `E4`, `E8`, `E16`, `E32`, `NC24-A100`, `NC48-A100` and `NC96-A100`.
         *
         * > **Note:** A `Consumption` type must have a name of `Consumption` and an environment may only have one `Consumption` Workload Profile.
         *
         * > **Note:** Defining a `Consumption` profile is optional, however, Environments created without an initial Workload Profile cannot have them added at a later time and must be recreated. Similarly, an environment created with Profiles must always have at least one defined Profile, removing all profiles will force a recreation of the resource.
         */
        workloadProfileType: pulumi.Input<string>;
    }
    interface JobEventTriggerConfig {
        /**
         * Number of parallel replicas of a job that can run at a given time.
         */
        parallelism?: pulumi.Input<number>;
        /**
         * Minimum number of successful replica completions before overall job completion.
         */
        replicaCompletionCount?: pulumi.Input<number>;
        /**
         * A `scale` block as defined below.
         */
        scales?: pulumi.Input<pulumi.Input<inputs.containerapp.JobEventTriggerConfigScale>[]>;
    }
    interface JobEventTriggerConfigScale {
        /**
         * Maximum number of job executions that are created for a trigger.
         */
        maxExecutions?: pulumi.Input<number>;
        /**
         * Minimum number of job executions that are created for a trigger.
         */
        minExecutions?: pulumi.Input<number>;
        /**
         * Interval to check each event source in seconds.
         */
        pollingIntervalInSeconds?: pulumi.Input<number>;
        /**
         * A `rules` block as defined below.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.containerapp.JobEventTriggerConfigScaleRule>[]>;
    }
    interface JobEventTriggerConfigScaleRule {
        /**
         * A `authentication` block as defined below.
         */
        authentications?: pulumi.Input<pulumi.Input<inputs.containerapp.JobEventTriggerConfigScaleRuleAuthentication>[]>;
        /**
         * Type of the scale rule. Possible values are `activemq`, `artemis-queue`, `kafka`, `pulsar`, `aws-cloudwatch`, `aws-dynamodb`, `aws-dynamodb-streams`, `aws-kinesis-stream`, `aws-sqs-queue`, `azure-app-insights`, `azure-blob`, `azure-data-explorer`, `azure-eventhub`, `azure-log-analytics`, `azure-monitor`, `azure-pipelines`, `azure-servicebus`, `azure-queue`, `cassandra`, `cpu`, `cron`, `datadog`, `elasticsearch`, `external`, `external-push`, `gcp-stackdriver`, `gcp-storage`, `gcp-pubsub`, `graphite`, `http`, `huawei-cloudeye`, `ibmmq`, `influxdb`, `kubernetes-workload`, `liiklus`, `memory`, `metrics-api`, `mongodb`, `mssql`, `mysql`, `nats-jetstream`, `stan`, `tcp`, `new-relic`, `openstack-metric`, `openstack-swift`, `postgresql`, `predictkube`, `prometheus`, `rabbitmq`, `redis`, `redis-cluster`, `redis-sentinel`, `redis-streams`, `redis-cluster-streams`, `redis-sentinel-streams`, `selenium-grid`, `solace-event-queue` and `github-runner`.
         */
        customRuleType: pulumi.Input<string>;
        /**
         * ID of the System or User Managed Identity used to execute scale rule.
         */
        identityId?: pulumi.Input<string>;
        /**
         * Metadata properties to describe the scale rule.
         */
        metadata: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Name of the scale rule.
         */
        name: pulumi.Input<string>;
    }
    interface JobEventTriggerConfigScaleRuleAuthentication {
        /**
         * Name of the secret from which to pull the auth params.
         */
        secretName: pulumi.Input<string>;
        /**
         * Trigger Parameter that uses the secret.
         */
        triggerParameter: pulumi.Input<string>;
    }
    interface JobIdentity {
        /**
         * A list of Managed Identity IDs to assign to the Container App Job.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for the Container App Job. Possible values are `SystemAssigned`, `UserAssigned` and `None`.
         */
        type: pulumi.Input<string>;
    }
    interface JobManualTriggerConfig {
        /**
         * Number of parallel replicas of a job that can run at a given time.
         */
        parallelism?: pulumi.Input<number>;
        /**
         * Minimum number of successful replica completions before overall job completion.
         */
        replicaCompletionCount?: pulumi.Input<number>;
    }
    interface JobRegistry {
        /**
         * A Managed Identity to use to authenticate with Azure Container Registry.
         */
        identity?: pulumi.Input<string>;
        /**
         * The name of the Secret that contains the registry login password.
         */
        passwordSecretName?: pulumi.Input<string>;
        /**
         * The URL of the Azure Container Registry server.
         */
        server: pulumi.Input<string>;
        /**
         * The username to use to authenticate with Azure Container Registry.
         */
        username?: pulumi.Input<string>;
    }
    interface JobScheduleTriggerConfig {
        /**
         * Cron formatted repeating schedule of a Cron Job.
         */
        cronExpression: pulumi.Input<string>;
        /**
         * Number of parallel replicas of a job that can run at a given time.
         */
        parallelism?: pulumi.Input<number>;
        /**
         * Minimum number of successful replica completions before overall job completion.
         */
        replicaCompletionCount?: pulumi.Input<number>;
    }
    interface JobSecret {
        /**
         * The identity to use for accessing the Key Vault secret reference. This can either be the Resource ID of a User Assigned Identity, or `System` for the System Assigned Identity.
         *
         * !> **Note:** `identity` must be used together with `keyVaultSecretId`
         */
        identity?: pulumi.Input<string>;
        /**
         * The ID of a Key Vault secret. This can be a versioned or version-less ID.
         *
         * !> **Note:** When using `keyVaultSecretId`, `ignoreChanges` should be used to ignore any changes to `value`.
         */
        keyVaultSecretId?: pulumi.Input<string>;
        /**
         * The secret name.
         */
        name: pulumi.Input<string>;
        /**
         * The value for this secret.
         *
         * !> **Note:** `value` will be ignored if `keyVaultSecretId` and `identity` are provided.
         */
        value?: pulumi.Input<string>;
    }
    interface JobTemplate {
        /**
         * A `container` block as defined below.
         */
        containers: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainer>[]>;
        /**
         * A `initContainer` block as defined below.
         */
        initContainers?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateInitContainer>[]>;
        /**
         * A `volume` block as defined below.
         */
        volumes?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateVolume>[]>;
    }
    interface JobTemplateContainer {
        /**
         * A list of extra arguments to pass to the container.
         */
        args?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A command to pass to the container to override the default. This is provided as a list of command line elements without spaces.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The amount of vCPU to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        cpu: pulumi.Input<number>;
        /**
         * One or more `env` blocks as detailed below.
         */
        envs?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerEnv>[]>;
        /**
         * The amount of ephemeral storage available to the Container App.
         *
         * > **Note:** `ephemeralStorage` is currently in preview and not configurable at this time.
         */
        ephemeralStorage?: pulumi.Input<string>;
        /**
         * The image to use to create the container.
         */
        image: pulumi.Input<string>;
        /**
         * A `livenessProbe` block as detailed below.
         */
        livenessProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerLivenessProbe>[]>;
        /**
         * The amount of memory to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        memory: pulumi.Input<string>;
        /**
         * The name of the container.
         */
        name: pulumi.Input<string>;
        /**
         * A `readinessProbe` block as detailed below.
         */
        readinessProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerReadinessProbe>[]>;
        /**
         * A `startupProbe` block as detailed below.
         */
        startupProbes?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerStartupProbe>[]>;
        /**
         * A `volumeMounts` block as detailed below.
         */
        volumeMounts?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerVolumeMount>[]>;
    }
    interface JobTemplateContainerEnv {
        /**
         * The name of the environment variable.
         */
        name: pulumi.Input<string>;
        /**
         * Name of the Container App secret from which to pull the environment variable value.
         */
        secretName?: pulumi.Input<string>;
        /**
         * The value of the environment variable.
         */
        value?: pulumi.Input<string>;
    }
    interface JobTemplateContainerLivenessProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `30`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerLivenessProbeHeader>[]>;
        /**
         * The probe hostname. Defaults to the pod IP address. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The time in seconds to wait after the container has started before the probe is started.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are in the range `1` - `240`. Defaults to `10`.
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use with the `host` for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The time in seconds after the container is sent the termination signal before the process if forcibly killed.
         */
        terminationGracePeriodSeconds?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface JobTemplateContainerLivenessProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface JobTemplateContainerReadinessProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `48`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerReadinessProbeHeader>[]>;
        /**
         * The probe hostname. Defaults to the pod IP address. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The number of seconds elapsed after the container has started before the probe is initiated. Possible values are between `0` and `60`. Defaults to `0` seconds.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are between `1` and `240`. Defaults to `10`
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The number of consecutive successful responses required to consider this probe as successful. Possible values are between `1` and `10`. Defaults to `3`.
         */
        successCountThreshold?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface JobTemplateContainerReadinessProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface JobTemplateContainerStartupProbe {
        /**
         * The number of consecutive failures required to consider this probe as failed. Possible values are between `1` and `240`. Defaults to `3`.
         */
        failureCountThreshold?: pulumi.Input<number>;
        /**
         * A `header` block as detailed below.
         */
        headers?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateContainerStartupProbeHeader>[]>;
        /**
         * The value for the host header which should be sent with this probe. If unspecified, the IP Address of the Pod is used as the host header. Setting a value for `Host` in `headers` can be used to override this for `HTTP` and `HTTPS` type probes.
         */
        host?: pulumi.Input<string>;
        /**
         * The number of seconds elapsed after the container has started before the probe is initiated. Possible values are between `0` and `60`. Defaults to `0` seconds.
         */
        initialDelay?: pulumi.Input<number>;
        /**
         * How often, in seconds, the probe should run. Possible values are between `1` and `240`. Defaults to `10`
         */
        intervalSeconds?: pulumi.Input<number>;
        /**
         * The URI to use with the `host` for http type probes. Not valid for `TCP` type probes. Defaults to `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number on which to connect. Possible values are between `1` and `65535`.
         */
        port: pulumi.Input<number>;
        /**
         * The time in seconds after the container is sent the termination signal before the process if forcibly killed.
         */
        terminationGracePeriodSeconds?: pulumi.Input<number>;
        /**
         * Time in seconds after which the probe times out. Possible values are in the range `1` - `240`. Defaults to `1`.
         */
        timeout?: pulumi.Input<number>;
        /**
         * Type of probe. Possible values are `TCP`, `HTTP`, and `HTTPS`.
         */
        transport: pulumi.Input<string>;
    }
    interface JobTemplateContainerStartupProbeHeader {
        /**
         * The HTTP Header Name.
         */
        name: pulumi.Input<string>;
        /**
         * The HTTP Header value.
         */
        value: pulumi.Input<string>;
    }
    interface JobTemplateContainerVolumeMount {
        /**
         * The name of the volume to mount. This must match the name of a volume defined in the `volume` block.
         */
        name: pulumi.Input<string>;
        /**
         * The path within the container at which the volume should be mounted. Must not contain `:`.
         */
        path: pulumi.Input<string>;
        /**
         * The sub path of the volume to be mounted in the container.
         */
        subPath?: pulumi.Input<string>;
    }
    interface JobTemplateInitContainer {
        /**
         * A list of extra arguments to pass to the container.
         */
        args?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A command to pass to the container to override the default. This is provided as a list of command line elements without spaces.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The amount of vCPU to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        cpu?: pulumi.Input<number>;
        /**
         * One or more `env` blocks as detailed below.
         */
        envs?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateInitContainerEnv>[]>;
        /**
         * The amount of ephemeral storage available to the Container App.
         *
         * > **Note:** `ephemeralStorage` is currently in preview and not configurable at this time.
         */
        ephemeralStorage?: pulumi.Input<string>;
        /**
         * The image to use to create the container.
         */
        image: pulumi.Input<string>;
        /**
         * The amount of memory to allocate to the container.
         *
         * > **Note:** When using a Consumption plan, the `cpu` and `memory` properties must add up to one of the combinations found in the Microsoft provided documentation, for more information see [vCPU and memory allocation requirements](https://learn.microsoft.com/azure/container-apps/containers#allocations)
         */
        memory?: pulumi.Input<string>;
        /**
         * The name of the container.
         */
        name: pulumi.Input<string>;
        /**
         * A `volumeMounts` block as detailed below.
         */
        volumeMounts?: pulumi.Input<pulumi.Input<inputs.containerapp.JobTemplateInitContainerVolumeMount>[]>;
    }
    interface JobTemplateInitContainerEnv {
        /**
         * The name of the environment variable.
         */
        name: pulumi.Input<string>;
        /**
         * Name of the Container App secret from which to pull the environment variable value.
         */
        secretName?: pulumi.Input<string>;
        /**
         * The value of the environment variable.
         */
        value?: pulumi.Input<string>;
    }
    interface JobTemplateInitContainerVolumeMount {
        /**
         * The name of the volume to mount. This must match the name of a volume defined in the `volume` block.
         */
        name: pulumi.Input<string>;
        /**
         * The path within the container at which the volume should be mounted. Must not contain `:`.
         */
        path: pulumi.Input<string>;
        /**
         * The sub path of the volume to be mounted in the container.
         */
        subPath?: pulumi.Input<string>;
    }
    interface JobTemplateVolume {
        /**
         * Mount options used while mounting the AzureFile. Must be a comma-separated string e.g. `dir_mode=0751,file_mode=0751`.
         */
        mountOptions?: pulumi.Input<string>;
        /**
         * The name of the volume.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the storage to use for the volume.
         */
        storageName?: pulumi.Input<string>;
        /**
         * The type of storage to use for the volume. Possible values are `AzureFile`, `EmptyDir`, `NfsAzureFile` and `Secret`. Defaults to `EmptyDir`.
         */
        storageType?: pulumi.Input<string>;
    }
}
export declare namespace containerservice {
    interface ConnectedRegistryNotification {
        /**
         * The action of the artifact that wants to be subscribed for the Connected Registry. Possible values are `push`, `delete` and `*` (i.e. any).
         */
        action: pulumi.Input<string>;
        /**
         * The digest of the artifact that wants to be subscribed for the Connected Registry.
         *
         * > **Note:** One of either `tag` or `digest` can be specified.
         */
        digest?: pulumi.Input<string>;
        /**
         * The name of the artifact that wants to be subscribed for the Connected Registry.
         */
        name: pulumi.Input<string>;
        /**
         * The tag of the artifact that wants to be subscribed for the Connected Registry.
         */
        tag?: pulumi.Input<string>;
    }
    interface FleetUpdateRunManagedClusterUpdate {
        /**
         * A `nodeImageSelection` block as defined below.
         */
        nodeImageSelection?: pulumi.Input<inputs.containerservice.FleetUpdateRunManagedClusterUpdateNodeImageSelection>;
        /**
         * A `upgrade` block as defined below.
         */
        upgrade: pulumi.Input<inputs.containerservice.FleetUpdateRunManagedClusterUpdateUpgrade>;
    }
    interface FleetUpdateRunManagedClusterUpdateNodeImageSelection {
        /**
         * Specifies the node image upgrade type. Possible values are `Latest` and `Consistent`.
         */
        type: pulumi.Input<string>;
    }
    interface FleetUpdateRunManagedClusterUpdateUpgrade {
        /**
         * Specifies the Kubernetes version to upgrade the member clusters to. This is required if `type` is set to `Full`.
         */
        kubernetesVersion?: pulumi.Input<string>;
        /**
         * Specifies the type of upgrade to perform. Possible values are `Full` and `NodeImageOnly`.
         */
        type: pulumi.Input<string>;
    }
    interface FleetUpdateRunStage {
        /**
         * Specifies the time in seconds to wait at the end of this stage before starting the next one.
         */
        afterStageWaitInSeconds?: pulumi.Input<number>;
        /**
         * One or more `group` blocks as defined below.
         */
        groups: pulumi.Input<pulumi.Input<inputs.containerservice.FleetUpdateRunStageGroup>[]>;
        /**
         * The name which should be used for this stage.
         */
        name: pulumi.Input<string>;
    }
    interface FleetUpdateRunStageGroup {
        /**
         * The name which should be used for this group.
         */
        name: pulumi.Input<string>;
    }
    interface FleetUpdateStrategyStage {
        /**
         * Specifies the time in seconds to wait at the end of this stage before starting the next one.
         */
        afterStageWaitInSeconds?: pulumi.Input<number>;
        /**
         * One or more `group` blocks as defined below.
         */
        groups: pulumi.Input<pulumi.Input<inputs.containerservice.FleetUpdateStrategyStageGroup>[]>;
        /**
         * The name which should be used for this stage.
         */
        name: pulumi.Input<string>;
    }
    interface FleetUpdateStrategyStageGroup {
        /**
         * The name which should be used for this group.
         */
        name: pulumi.Input<string>;
    }
    interface FluxConfigurationBlobStorage {
        /**
         * Specifies the account key (shared key) to access the storage account.
         */
        accountKey?: pulumi.Input<string>;
        /**
         * Specifies the Azure Blob container ID.
         */
        containerId: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * A `managedIdentity` block as defined below.
         */
        managedIdentity?: pulumi.Input<inputs.containerservice.FluxConfigurationBlobStorageManagedIdentity>;
        /**
         * Specifies the shared access token to access the storage container.
         */
        sasToken?: pulumi.Input<string>;
        /**
         * A `servicePrincipal` block as defined below.
         */
        servicePrincipal?: pulumi.Input<inputs.containerservice.FluxConfigurationBlobStorageServicePrincipal>;
        /**
         * Specifies the interval at which to re-reconcile the cluster Azure Blob source with the remote.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster Azure Blob source with the remote.
         */
        timeoutInSeconds?: pulumi.Input<number>;
    }
    interface FluxConfigurationBlobStorageManagedIdentity {
        /**
         * Specifies the client ID for authenticating a Managed Identity.
         */
        clientId: pulumi.Input<string>;
    }
    interface FluxConfigurationBlobStorageServicePrincipal {
        /**
         * Base64-encoded certificate used to authenticate a Service Principal .
         */
        clientCertificateBase64?: pulumi.Input<string>;
        /**
         * Specifies the password for the certificate used to authenticate a Service Principal .
         */
        clientCertificatePassword?: pulumi.Input<string>;
        /**
         * Specifies whether to include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication for the client certificate.
         */
        clientCertificateSendChain?: pulumi.Input<boolean>;
        /**
         * Specifies the client ID for authenticating a Service Principal.
         */
        clientId: pulumi.Input<string>;
        /**
         * Specifies the client secret for authenticating a Service Principal.
         */
        clientSecret?: pulumi.Input<string>;
        /**
         * Specifies the tenant ID for authenticating a Service Principal.
         */
        tenantId: pulumi.Input<string>;
    }
    interface FluxConfigurationBucket {
        /**
         * Specifies the plaintext access key used to securely access the S3 bucket.
         */
        accessKey?: pulumi.Input<string>;
        /**
         * Specifies the bucket name to sync from the url endpoint for the flux configuration.
         */
        bucketName: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets. It must be between 1 and 63 characters. It can contain only lowercase letters, numbers, and hyphens (-). It must start and end with a lowercase letter or number.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded secret key used to authenticate with the bucket source.
         */
        secretKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the interval at which to re-reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specify whether to communicate with a bucket using TLS is enabled. Defaults to `true`.
         */
        tlsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the URL to sync for the flux configuration S3 bucket. It must start with `http://` or `https://`.
         */
        url: pulumi.Input<string>;
    }
    interface FluxConfigurationGitRepository {
        /**
         * Specifies the Base64-encoded HTTPS certificate authority contents used to access git private git repositories over HTTPS.
         */
        httpsCaCertBase64?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded HTTPS personal access token or password that will be used to access the repository.
         */
        httpsKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the plaintext HTTPS username used to access private git repositories over HTTPS.
         */
        httpsUser?: pulumi.Input<string>;
        /**
         * Specifies the name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets. It must be between 1 and 63 characters. It can contain only lowercase letters, numbers, and hyphens (-). It must start and end with a lowercase letter or number.
         */
        localAuthReference?: pulumi.Input<string>;
        /**
         * Specifies the OIDC provider used for workload identity federation authentication against git repositories. Possible values are `Azure`, `Generic`, `GitHub`.
         */
        provider?: pulumi.Input<string>;
        /**
         * Specifies the source reference type for the GitRepository object. Possible values are `branch`, `commit`, `semver` and `tag`.
         */
        referenceType: pulumi.Input<string>;
        /**
         * Specifies the source reference value for the GitRepository object.
         */
        referenceValue: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded knownHosts value containing public SSH keys required to access private git repositories over SSH.
         */
        sshKnownHostsBase64?: pulumi.Input<string>;
        /**
         * Specifies the Base64-encoded SSH private key in PEM format.
         */
        sshPrivateKeyBase64?: pulumi.Input<string>;
        /**
         * Specifies the interval at which to re-reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the maximum time to attempt to reconcile the cluster git repository source with the remote. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the URL to sync for the flux configuration git repository. It must start with `http://`, `https://`, `git@` or `ssh://`.
         */
        url: pulumi.Input<string>;
    }
    interface FluxConfigurationKustomization {
        /**
         * Specifies other kustomizations that this kustomization depends on. This kustomization will not reconcile until all dependencies have completed their reconciliation.
         */
        dependsOns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether garbage collections of Kubernetes objects created by this kustomization is enabled. Defaults to `false`.
         */
        garbageCollectionEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the kustomization.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the path in the source reference to reconcile on the cluster.
         */
        path?: pulumi.Input<string>;
        /**
         * A `postBuild` block as defined below.
         */
        postBuild?: pulumi.Input<inputs.containerservice.FluxConfigurationKustomizationPostBuild>;
        /**
         * Whether re-creating Kubernetes resources on the cluster is enabled when patching fails due to an immutable field change. Defaults to `false`.
         */
        recreatingEnabled?: pulumi.Input<boolean>;
        /**
         * The interval at which to re-reconcile the kustomization on the cluster in the event of failure on reconciliation. Defaults to `600`.
         */
        retryIntervalInSeconds?: pulumi.Input<number>;
        /**
         * The interval at which to re-reconcile the kustomization on the cluster. Defaults to `600`.
         */
        syncIntervalInSeconds?: pulumi.Input<number>;
        /**
         * The maximum time to attempt to reconcile the kustomization on the cluster. Defaults to `600`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * Whether to enable health check for all Kubernetes objects created by this Kustomization. Defaults to `true`.
         */
        wait?: pulumi.Input<boolean>;
    }
    interface FluxConfigurationKustomizationPostBuild {
        /**
         * Specifies the key/value pairs holding the variables to be substituted in this Kustomization.
         */
        substitute?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * A `substituteFrom` block as defined below.
         */
        substituteFroms?: pulumi.Input<pulumi.Input<inputs.containerservice.FluxConfigurationKustomizationPostBuildSubstituteFrom>[]>;
    }
    interface FluxConfigurationKustomizationPostBuildSubstituteFrom {
        /**
         * Specifies the source kind to hold the variables to be used in substitution. Possible values are `ConfigMap` and `Secret`.
         */
        kind: pulumi.Input<string>;
        /**
         * Specifies the name of the ConfigMap/Secret that holds the variables to be used in substitution.
         */
        name: pulumi.Input<string>;
        /**
         * Whether to proceed without ConfigMap/Secret if it is not present. Defaults to `false`.
         */
        optional?: pulumi.Input<boolean>;
    }
    interface GroupContainer {
        /**
         * A list of commands which should be run on the container. Changing this forces a new resource to be created.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The required number of CPU cores of the containers. Changing this forces a new resource to be created.
         */
        cpu: pulumi.Input<number>;
        /**
         * The upper limit of the number of CPU cores of the containers.
         */
        cpuLimit?: pulumi.Input<number>;
        /**
         * A list of environment variables to be set on the container. Specified as a map of name/value pairs. Changing this forces a new resource to be created.
         */
        environmentVariables?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The container image name. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<string>;
        /**
         * The definition of a readiness probe for this container as documented in the `livenessProbe` block below. Changing this forces a new resource to be created.
         */
        livenessProbe?: pulumi.Input<inputs.containerservice.GroupContainerLivenessProbe>;
        /**
         * The required memory of the containers in GB. Changing this forces a new resource to be created.
         */
        memory: pulumi.Input<number>;
        /**
         * The upper limit of the memory of the containers in GB.
         */
        memoryLimit?: pulumi.Input<number>;
        /**
         * Specifies the name of the Container. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * A set of public ports for the container. Changing this forces a new resource to be created. Set as documented in the `ports` block below.
         */
        ports?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupContainerPort>[]>;
        /**
         * The definition of a readiness probe for this container as documented in the `readinessProbe` block below. Changing this forces a new resource to be created.
         */
        readinessProbe?: pulumi.Input<inputs.containerservice.GroupContainerReadinessProbe>;
        /**
         * A list of sensitive environment variables to be set on the container. Specified as a map of name/value pairs. Changing this forces a new resource to be created.
         */
        secureEnvironmentVariables?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The definition of the security context for this container as documented in the `security` block below. Changing this forces a new resource to be created.
         */
        securities?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupContainerSecurity>[]>;
        /**
         * The definition of a volume mount for this container as documented in the `volume` block below. Changing this forces a new resource to be created.
         */
        volumes?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupContainerVolume>[]>;
    }
    interface GroupContainerLivenessProbe {
        /**
         * Commands to be run to validate container readiness. Changing this forces a new resource to be created.
         */
        execs?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * How many times to try the probe before restarting the container (liveness probe) or marking the container as unhealthy (readiness probe). Changing this forces a new resource to be created.
         */
        failureThreshold?: pulumi.Input<number>;
        /**
         * The definition of the httpGet for this container as documented in the `httpGet` block below. Changing this forces a new resource to be created.
         */
        httpGets?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupContainerLivenessProbeHttpGet>[]>;
        /**
         * Number of seconds after the container has started before liveness or readiness probes are initiated. Changing this forces a new resource to be created.
         */
        initialDelaySeconds?: pulumi.Input<number>;
        /**
         * How often (in seconds) to perform the probe. Changing this forces a new resource to be created.
         */
        periodSeconds?: pulumi.Input<number>;
        /**
         * Minimum consecutive successes for the probe to be considered successful after having failed. Changing this forces a new resource to be created.
         */
        successThreshold?: pulumi.Input<number>;
        /**
         * Number of seconds after which the probe times out. Changing this forces a new resource to be created.
         */
        timeoutSeconds?: pulumi.Input<number>;
    }
    interface GroupContainerLivenessProbeHttpGet {
        /**
         * A map of HTTP headers used to access on the container. Changing this forces a new resource to be created.
         */
        httpHeaders?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Path to access on the HTTP server. Changing this forces a new resource to be created.
         */
        path?: pulumi.Input<string>;
        /**
         * Number of the port to access on the container. Changing this forces a new resource to be created.
         */
        port?: pulumi.Input<number>;
        /**
         * Scheme to use for connecting to the host. Possible values are `Http` and `Https`. Changing this forces a new resource to be created.
         */
        scheme?: pulumi.Input<string>;
    }
    interface GroupContainerPort {
        /**
         * The port number the container will expose. Changing this forces a new resource to be created.
         */
        port?: pulumi.Input<number>;
        /**
         * The network protocol associated with port. Possible values are `TCP` & `UDP`. Changing this forces a new resource to be created. Defaults to `TCP`.
         *
         * > **Note:** Omitting these blocks will default the exposed ports on the group to all ports on all containers defined in the `container` blocks of this group.
         */
        protocol?: pulumi.Input<string>;
    }
    interface GroupContainerReadinessProbe {
        /**
         * Commands to be run to validate container readiness. Changing this forces a new resource to be created.
         */
        execs?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * How many times to try the probe before restarting the container (liveness probe) or marking the container as unhealthy (readiness probe). Changing this forces a new resource to be created.
         */
        failureThreshold?: pulumi.Input<number>;
        /**
         * The definition of the httpGet for this container as documented in the `httpGet` block below. Changing this forces a new resource to be created.
         */
        httpGets?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupContainerReadinessProbeHttpGet>[]>;
        /**
         * Number of seconds after the container has started before liveness or readiness probes are initiated. Changing this forces a new resource to be created.
         */
        initialDelaySeconds?: pulumi.Input<number>;
        /**
         * How often (in seconds) to perform the probe. Changing this forces a new resource to be created.
         */
        periodSeconds?: pulumi.Input<number>;
        /**
         * Minimum consecutive successes for the probe to be considered successful after having failed. Changing this forces a new resource to be created.
         */
        successThreshold?: pulumi.Input<number>;
        /**
         * Number of seconds after which the probe times out. Changing this forces a new resource to be created.
         */
        timeoutSeconds?: pulumi.Input<number>;
    }
    interface GroupContainerReadinessProbeHttpGet {
        /**
         * A map of HTTP headers used to access on the container. Changing this forces a new resource to be created.
         */
        httpHeaders?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Path to access on the HTTP server. Changing this forces a new resource to be created.
         */
        path?: pulumi.Input<string>;
        /**
         * Number of the port to access on the container. Changing this forces a new resource to be created.
         */
        port?: pulumi.Input<number>;
        /**
         * Scheme to use for connecting to the host. Possible values are `Http` and `Https`. Changing this forces a new resource to be created.
         */
        scheme?: pulumi.Input<string>;
    }
    interface GroupContainerSecurity {
        /**
         * Whether the container's permission is elevated to privileged? Changing this forces a new resource to be created.
         *
         * > **Note:** Currently, this only applies when the `osType` is `Linux` and the `sku` is `Confidential`.
         */
        privilegeEnabled: pulumi.Input<boolean>;
    }
    interface GroupContainerVolume {
        /**
         * Boolean as to whether the mounted volume should be an empty directory. Defaults to `false`. Changing this forces a new resource to be created.
         */
        emptyDir?: pulumi.Input<boolean>;
        /**
         * A `gitRepo` block as defined below. Changing this forces a new resource to be created.
         */
        gitRepo?: pulumi.Input<inputs.containerservice.GroupContainerVolumeGitRepo>;
        /**
         * The path on which this volume is to be mounted. Changing this forces a new resource to be created.
         */
        mountPath: pulumi.Input<string>;
        /**
         * The name of the volume mount. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specify if the volume is to be mounted as read only or not. The default value is `false`. Changing this forces a new resource to be created.
         */
        readOnly?: pulumi.Input<boolean>;
        /**
         * A map of secrets that will be mounted as files in the volume. Changing this forces a new resource to be created.
         *
         * > **Note:** Exactly one of `emptyDir` volume, `gitRepo` volume, `secret` volume or storage account volume (`shareName`, `storageAccountName`, and `storageAccountKey`) must be specified.
         *
         * > **Note:** when using a storage account volume, all of `shareName`, `storageAccountName`, and `storageAccountKey` must be specified.
         *
         * > **Note:** The secret values must be supplied as Base64 encoded strings. The secret values are decoded to their original values when mounted in the volume on the container.
         */
        secret?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure storage share that is to be mounted as a volume. This must be created on the storage account specified as above. Changing this forces a new resource to be created.
         */
        shareName?: pulumi.Input<string>;
        /**
         * The access key for the Azure Storage account specified as above. Changing this forces a new resource to be created.
         */
        storageAccountKey?: pulumi.Input<string>;
        /**
         * The Azure storage account from which the volume is to be mounted. Changing this forces a new resource to be created.
         */
        storageAccountName?: pulumi.Input<string>;
    }
    interface GroupContainerVolumeGitRepo {
        /**
         * Specifies the directory into which the repository should be cloned. Changing this forces a new resource to be created.
         */
        directory?: pulumi.Input<string>;
        /**
         * Specifies the commit hash of the revision to be cloned. If unspecified, the HEAD revision is cloned. Changing this forces a new resource to be created.
         */
        revision?: pulumi.Input<string>;
        /**
         * Specifies the Git repository to be cloned. Changing this forces a new resource to be created.
         */
        url: pulumi.Input<string>;
    }
    interface GroupDiagnostics {
        /**
         * A `logAnalytics` block as defined below. Changing this forces a new resource to be created.
         */
        logAnalytics: pulumi.Input<inputs.containerservice.GroupDiagnosticsLogAnalytics>;
    }
    interface GroupDiagnosticsLogAnalytics {
        /**
         * The log type which should be used. Possible values are `ContainerInsights` and `ContainerInstanceLogs`. Changing this forces a new resource to be created.
         */
        logType?: pulumi.Input<string>;
        /**
         * Any metadata required for Log Analytics. Changing this forces a new resource to be created.
         */
        metadata?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Workspace ID of the Log Analytics Workspace. Changing this forces a new resource to be created.
         */
        workspaceId: pulumi.Input<string>;
        /**
         * The Workspace Key of the Log Analytics Workspace. Changing this forces a new resource to be created.
         */
        workspaceKey: pulumi.Input<string>;
    }
    interface GroupDnsConfig {
        /**
         * A list of nameservers the containers will search out to resolve requests. Changing this forces a new resource to be created.
         */
        nameservers: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of [resolver configuration options](https://man7.org/linux/man-pages/man5/resolv.conf.5.html). Changing this forces a new resource to be created.
         */
        options?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of search domains that DNS requests will search along. Changing this forces a new resource to be created.
         */
        searchDomains?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface GroupExposedPort {
        /**
         * The port number the container will expose. Changing this forces a new resource to be created.
         */
        port?: pulumi.Input<number>;
        /**
         * The network protocol associated with port. Possible values are `TCP` & `UDP`. Changing this forces a new resource to be created. Defaults to `TCP`.
         *
         * > **Note:** Removing all `exposedPort` blocks requires setting `exposedPort = []`.
         */
        protocol?: pulumi.Input<string>;
    }
    interface GroupIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Group.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         *
         * > **Note:** Currently you can't use a managed identity in a container group deployed to a virtual network.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Container Group. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         *
         * > **Note:** When `type` is set to `SystemAssigned`, the identity of the Principal ID can be retrieved after the container group has been created. See [documentation](https://docs.microsoft.com/azure/active-directory/managed-service-identity/overview) for more information.
         */
        type: pulumi.Input<string>;
    }
    interface GroupImageRegistryCredential {
        /**
         * The password with which to connect to the registry. Changing this forces a new resource to be created.
         */
        password?: pulumi.Input<string>;
        /**
         * The address to use to connect to the registry without protocol ("https"/"http"). For example: "myacr.acr.io". Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The identity ID for the private registry. Changing this forces a new resource to be created.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
        /**
         * The username with which to connect to the registry. Changing this forces a new resource to be created.
         */
        username?: pulumi.Input<string>;
    }
    interface GroupInitContainer {
        /**
         * A list of commands which should be run on the container. Changing this forces a new resource to be created.
         */
        commands?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of environment variables to be set on the container. Specified as a map of name/value pairs. Changing this forces a new resource to be created.
         */
        environmentVariables?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The container image name. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<string>;
        /**
         * Specifies the name of the Container. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * A list of sensitive environment variables to be set on the container. Specified as a map of name/value pairs. Changing this forces a new resource to be created.
         */
        secureEnvironmentVariables?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The definition of the security context for this container as documented in the `security` block below. Changing this forces a new resource to be created.
         */
        securities?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupInitContainerSecurity>[]>;
        /**
         * The definition of a volume mount for this container as documented in the `volume` block below. Changing this forces a new resource to be created.
         */
        volumes?: pulumi.Input<pulumi.Input<inputs.containerservice.GroupInitContainerVolume>[]>;
    }
    interface GroupInitContainerSecurity {
        /**
         * Whether the container's permission is elevated to privileged? Changing this forces a new resource to be created.
         *
         * > **Note:** Currently, this only applies when the `osType` is `Linux` and the `sku` is `Confidential`.
         */
        privilegeEnabled: pulumi.Input<boolean>;
    }
    interface GroupInitContainerVolume {
        /**
         * Boolean as to whether the mounted volume should be an empty directory. Defaults to `false`. Changing this forces a new resource to be created.
         */
        emptyDir?: pulumi.Input<boolean>;
        /**
         * A `gitRepo` block as defined below. Changing this forces a new resource to be created.
         */
        gitRepo?: pulumi.Input<inputs.containerservice.GroupInitContainerVolumeGitRepo>;
        /**
         * The path on which this volume is to be mounted. Changing this forces a new resource to be created.
         */
        mountPath: pulumi.Input<string>;
        /**
         * The name of the volume mount. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specify if the volume is to be mounted as read only or not. The default value is `false`. Changing this forces a new resource to be created.
         */
        readOnly?: pulumi.Input<boolean>;
        /**
         * A map of secrets that will be mounted as files in the volume. Changing this forces a new resource to be created.
         *
         * > **Note:** Exactly one of `emptyDir` volume, `gitRepo` volume, `secret` volume or storage account volume (`shareName`, `storageAccountName`, and `storageAccountKey`) must be specified.
         *
         * > **Note:** when using a storage account volume, all of `shareName`, `storageAccountName`, and `storageAccountKey` must be specified.
         *
         * > **Note:** The secret values must be supplied as Base64 encoded strings. The secret values are decoded to their original values when mounted in the volume on the container.
         */
        secret?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Azure storage share that is to be mounted as a volume. This must be created on the storage account specified as above. Changing this forces a new resource to be created.
         */
        shareName?: pulumi.Input<string>;
        /**
         * The access key for the Azure Storage account specified as above. Changing this forces a new resource to be created.
         */
        storageAccountKey?: pulumi.Input<string>;
        /**
         * The Azure storage account from which the volume is to be mounted. Changing this forces a new resource to be created.
         */
        storageAccountName?: pulumi.Input<string>;
    }
    interface GroupInitContainerVolumeGitRepo {
        /**
         * Specifies the directory into which the repository should be cloned. Changing this forces a new resource to be created.
         */
        directory?: pulumi.Input<string>;
        /**
         * Specifies the commit hash of the revision to be cloned. If unspecified, the HEAD revision is cloned. Changing this forces a new resource to be created.
         */
        revision?: pulumi.Input<string>;
        /**
         * Specifies the Git repository to be cloned. Changing this forces a new resource to be created.
         */
        url: pulumi.Input<string>;
    }
    interface KubernetesClusterAciConnectorLinux {
        /**
         * A `connectorIdentity` block is exported. The exported attributes are defined below.
         */
        connectorIdentities?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterAciConnectorLinuxConnectorIdentity>[]>;
        /**
         * The subnet name for the virtual nodes to run.
         *
         * > **Note:** At this time ACI Connectors are not supported in Azure China.
         *
         * > **Note:** AKS will add a delegation to the subnet named here. To prevent further runs from failing you should make sure that the subnet you create for virtual nodes has a delegation, like so.
         *
         * ```typescript
         * import * as pulumi from "@pulumi/pulumi";
         * import * as azure from "@pulumi/azure";
         *
         * const virtual = new azure.network.Subnet("virtual", {delegations: [{
         *     name: "aciDelegation",
         *     serviceDelegation: {
         *         name: "Microsoft.ContainerInstance/containerGroups",
         *         actions: ["Microsoft.Network/virtualNetworks/subnets/action"],
         *     },
         * }]});
         * ```
         */
        subnetName: pulumi.Input<string>;
    }
    interface KubernetesClusterAciConnectorLinuxConnectorIdentity {
        /**
         * The Client ID of the user-defined Managed Identity used for Web App Routing.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity used for Web App Routing
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used for Web App Routing.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterApiServerAccessProfile {
        /**
         * Set of authorized IP ranges to allow access to API server, e.g. ["198.51.100.0/24"].
         */
        authorizedIpRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet where the API server endpoint is delegated to.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * Whether to enable virtual network integration for the API Server. Defaults to `false`.
         */
        virtualNetworkIntegrationEnabled?: pulumi.Input<boolean>;
    }
    interface KubernetesClusterAutoScalerProfile {
        /**
         * Detect similar node groups and balance the number of nodes between them. Defaults to `false`.
         */
        balanceSimilarNodeGroups?: pulumi.Input<boolean>;
        /**
         * Whether DaemonSet pods will be gracefully terminated from empty nodes. Defaults to `false`.
         */
        daemonsetEvictionForEmptyNodesEnabled?: pulumi.Input<boolean>;
        /**
         * Whether DaemonSet pods will be gracefully terminated from non-empty nodes. Defaults to `true`.
         */
        daemonsetEvictionForOccupiedNodesEnabled?: pulumi.Input<boolean>;
        /**
         * Maximum number of empty nodes that can be deleted at the same time. Defaults to `10`.
         */
        emptyBulkDeleteMax?: pulumi.Input<string>;
        /**
         * Expander to use. Possible values are `least-waste`, `priority`, `most-pods` and `random`. Defaults to `random`.
         */
        expander?: pulumi.Input<string>;
        /**
         * Whether DaemonSet pods will be ignored when calculating resource utilization for scale down. Defaults to `false`.
         */
        ignoreDaemonsetsUtilizationEnabled?: pulumi.Input<boolean>;
        /**
         * Maximum number of seconds the cluster autoscaler waits for pod termination when trying to scale down a node. Defaults to `600`.
         */
        maxGracefulTerminationSec?: pulumi.Input<string>;
        /**
         * Maximum time the autoscaler waits for a node to be provisioned. Defaults to `15m`.
         */
        maxNodeProvisioningTime?: pulumi.Input<string>;
        /**
         * Maximum Number of allowed unready nodes. Defaults to `3`.
         */
        maxUnreadyNodes?: pulumi.Input<number>;
        /**
         * Maximum percentage of unready nodes the cluster autoscaler will stop if the percentage is exceeded. Defaults to `45`.
         */
        maxUnreadyPercentage?: pulumi.Input<number>;
        /**
         * For scenarios like burst/batch scale where you don't want CA to act before the kubernetes scheduler could schedule all the pods, you can tell CA to ignore unscheduled pods before they're a certain age. Defaults to `10s`.
         */
        newPodScaleUpDelay?: pulumi.Input<string>;
        /**
         * How long after the scale up of AKS nodes the scale down evaluation resumes. Defaults to `10m`.
         */
        scaleDownDelayAfterAdd?: pulumi.Input<string>;
        /**
         * How long after node deletion that scale down evaluation resumes. Defaults to the value used for `scanInterval`.
         */
        scaleDownDelayAfterDelete?: pulumi.Input<string>;
        /**
         * How long after scale down failure that scale down evaluation resumes. Defaults to `3m`.
         */
        scaleDownDelayAfterFailure?: pulumi.Input<string>;
        /**
         * How long a node should be unneeded before it is eligible for scale down. Defaults to `10m`.
         */
        scaleDownUnneeded?: pulumi.Input<string>;
        /**
         * How long an unready node should be unneeded before it is eligible for scale down. Defaults to `20m`.
         */
        scaleDownUnready?: pulumi.Input<string>;
        /**
         * Node utilization level, defined as sum of requested resources divided by capacity, below which a node can be considered for scale down. Defaults to `0.5`.
         */
        scaleDownUtilizationThreshold?: pulumi.Input<string>;
        /**
         * How often the AKS Cluster should be re-evaluated for scale up/down. Defaults to `10s`.
         */
        scanInterval?: pulumi.Input<string>;
        /**
         * If `true` cluster autoscaler will never delete nodes with pods with local storage, for example, EmptyDir or HostPath. Defaults to `false`.
         * <!-- Note: Although Azure’s API default is `true`, Terraform sends the zero-value (`false`) whenever an `autoScalerProfile` block is present but this field isn’t set. -->
         */
        skipNodesWithLocalStorage?: pulumi.Input<boolean>;
        /**
         * If `true` cluster autoscaler will never delete nodes with pods from kube-system (except for DaemonSet or mirror pods). Defaults to `true`.
         */
        skipNodesWithSystemPods?: pulumi.Input<boolean>;
    }
    interface KubernetesClusterAzureActiveDirectoryRoleBasedAccessControl {
        /**
         * A list of Object IDs of Azure Active Directory Groups which should have Admin Role on the Cluster.
         */
        adminGroupObjectIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is Role Based Access Control based on Azure AD enabled?
         */
        azureRbacEnabled?: pulumi.Input<boolean>;
        /**
         * The Tenant ID used for Azure Active Directory Application. If this isn't specified the Tenant ID of the current Subscription is used.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface KubernetesClusterBootstrapProfile {
        /**
         * The artifact source. The source where the artifacts are downloaded from. Possible values are `Cache` and `Direct`. Defaults to `Direct`.
         *
         * > **Note:** If the `artifactSource` is set to `Cache` and the `outboundType` has been specified, the managed ACR and related resources will **not** be automatically deleted and must be removed manually. Please see the product [documentation](https://learn.microsoft.com/azure/aks/concepts-network-isolated#how-a-network-isolated-cluster-works) for more information.
         */
        artifactSource?: pulumi.Input<string>;
        /**
         * The resource Id of Azure Container Registry.
         *
         * > **Note:** The `containerRegistryId` requires an ACR with a private link to the cluster. You must manage permissions, cache rules, the associated private link and the private endpoint. Please see the product [documentation](https://learn.microsoft.com/azure/container-registry/container-registry-private-link) for more information on configuring an ACR with a private endpoint.
         */
        containerRegistryId?: pulumi.Input<string>;
    }
    interface KubernetesClusterConfidentialComputing {
        /**
         * Should the SGX quote helper be enabled?
         */
        sgxQuoteHelperEnabled: pulumi.Input<boolean>;
    }
    interface KubernetesClusterDefaultNodePool {
        /**
         * Should [the Kubernetes Auto Scaler](https://docs.microsoft.com/azure/aks/cluster-autoscaler) be enabled for this Node Pool?
         *
         * > **Note:** This requires that the `type` is set to `VirtualMachineScaleSets`.
         *
         * > **Note:** If you're using AutoScaling, you may wish to use [`ignoreChanges` functionality](https://www.pulumi.com/docs/intro/concepts/programming-model/#ignorechanges) to ignore changes to the `nodeCount` field.
         */
        autoScalingEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the ID of the Capacity Reservation Group within which this AKS Cluster should be created. Changing this forces a new resource to be created.
         */
        capacityReservationGroupId?: pulumi.Input<string>;
        /**
         * Should the nodes in this Node Pool have Federal Information Processing Standard enabled? `temporaryNameForRotation` must be specified when changing this block.
         */
        fipsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the driver type for GPU nodes. Possible values are `Install` and `None`. Changing this forces a new resource to be created.
         */
        gpuDriver?: pulumi.Input<string>;
        /**
         * Specifies the GPU MIG instance profile for supported GPU VM SKU. The allowed values are `MIG1g`, `MIG2g`, `MIG3g`, `MIG4g` and `MIG7g`. Changing this forces a new resource to be created.
         */
        gpuInstance?: pulumi.Input<string>;
        /**
         * Should the nodes in the Default Node Pool have host encryption enabled? `temporaryNameForRotation` must be specified when changing this property.
         *
         * > **Note:** This requires that the Feature `Microsoft.Compute/EncryptionAtHost` is enabled and the Resource Provider is registered.
         */
        hostEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the ID of the Host Group within which this AKS Cluster should be created. Changing this forces a new resource to be created.
         */
        hostGroupId?: pulumi.Input<string>;
        /**
         * A `kubeletConfig` block as defined below. `temporaryNameForRotation` must be specified when changing this block.
         */
        kubeletConfig?: pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolKubeletConfig>;
        /**
         * The type of disk used by kubelet. Possible values are `OS` and `Temporary`. `temporaryNameForRotation` must be specified when changing this block.
         */
        kubeletDiskType?: pulumi.Input<string>;
        /**
         * A `linuxOsConfig` block as defined below. `temporaryNameForRotation` must be specified when changing this block.
         */
        linuxOsConfig?: pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolLinuxOsConfig>;
        maxCount?: pulumi.Input<number>;
        /**
         * The maximum number of pods that can run on each agent. `temporaryNameForRotation` must be specified when changing this property.
         */
        maxPods?: pulumi.Input<number>;
        minCount?: pulumi.Input<number>;
        /**
         * The name which should be used for the default Kubernetes Node Pool.
         */
        name: pulumi.Input<string>;
        nodeCount?: pulumi.Input<number>;
        /**
         * A map of Kubernetes labels which should be applied to nodes in the Default Node Pool.
         */
        nodeLabels?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * A `nodeNetworkProfile` block as documented below.
         */
        nodeNetworkProfile?: pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolNodeNetworkProfile>;
        /**
         * Should nodes in this Node Pool have a Public IP Address? `temporaryNameForRotation` must be specified when changing this property.
         */
        nodePublicIpEnabled?: pulumi.Input<boolean>;
        /**
         * Resource ID for the Public IP Addresses Prefix for the nodes in this Node Pool. `nodePublicIpEnabled` should be `true`. Changing this forces a new resource to be created.
         */
        nodePublicIpPrefixId?: pulumi.Input<string>;
        /**
         * Enabling this option will taint default node pool with `CriticalAddonsOnly=true:NoSchedule` taint. `temporaryNameForRotation` must be specified when changing this property.
         */
        onlyCriticalAddonsEnabled?: pulumi.Input<boolean>;
        /**
         * Version of Kubernetes used for the Agents. If not specified, the default node pool will be created with the version specified by `kubernetesVersion`. If both are unspecified, the latest recommended version will be used at provisioning time (but won't auto-upgrade). AKS does not require an exact patch version to be specified, minor version aliases such as `1.22` are also supported. - The minor version's latest GA patch is automatically chosen in that case. More details can be found in [the documentation](https://docs.microsoft.com/en-us/azure/aks/supported-kubernetes-versions?tabs=azure-cli#alias-minor-version).
         *
         * > **Note:** This version must be supported by the Kubernetes Cluster - as such the version of Kubernetes used on the Cluster/Control Plane may need to be upgraded first.
         */
        orchestratorVersion?: pulumi.Input<string>;
        /**
         * The size of the OS Disk which should be used for each agent in the Node Pool. `temporaryNameForRotation` must be specified when attempting a change.
         */
        osDiskSizeGb?: pulumi.Input<number>;
        /**
         * The type of disk which should be used for the Operating System. Possible values are `Ephemeral` and `Managed`. Defaults to `Managed`. `temporaryNameForRotation` must be specified when attempting a change.
         */
        osDiskType?: pulumi.Input<string>;
        /**
         * Specifies the OS SKU used by the agent pool. Possible values are `AzureLinux`, `AzureLinux3`, `Ubuntu`, `Ubuntu2204`, `Ubuntu2404`, `Windows2019` and `Windows2022`. If not specified, the default is `Ubuntu` when os_type=Linux or `Windows2019` if os_type=Windows (`Windows2022` Kubernetes ≥1.33). Changing between `AzureLinux` and `Ubuntu` does not replace the resource; otherwise `temporaryNameForRotation` must be specified when attempting a change.
         *
         * > **Note:** `Windows2019` is deprecated and not supported for Kubernetes version ≥1.33.
         */
        osSku?: pulumi.Input<string>;
        /**
         * The ID of the Subnet where the pods in the default Node Pool should exist.
         */
        podSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Proximity Placement Group. Changing this forces a new resource to be created.
         */
        proximityPlacementGroupId?: pulumi.Input<string>;
        /**
         * Specifies the autoscaling behaviour of the Kubernetes Cluster. Allowed values are `Delete` and `Deallocate`. Defaults to `Delete`.
         */
        scaleDownMode?: pulumi.Input<string>;
        /**
         * The ID of the Snapshot which should be used to create this default Node Pool. `temporaryNameForRotation` must be specified when changing this property.
         */
        snapshotId?: pulumi.Input<string>;
        /**
         * A mapping of tags to assign to the Node Pool.
         *
         * > At this time there's a bug in the AKS API where Tags for a Node Pool are not stored in the correct case - you may wish to use `ignoreChanges` functionality to ignore changes to the casing until this is fixed in the AKS API.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies the name of the temporary node pool used to cycle the default node pool for VM resizing.
         */
        temporaryNameForRotation?: pulumi.Input<string>;
        /**
         * The type of Node Pool which should be created. Possible values are `VirtualMachineScaleSets`. Defaults to `VirtualMachineScaleSets`. Changing this forces a new resource to be created.
         *
         * > **Note:** When creating a cluster that supports multiple node pools, the cluster must use `VirtualMachineScaleSets`. For more information on the limitations of clusters using multiple node pools see [the documentation](https://learn.microsoft.com/en-us/azure/aks/use-multiple-node-pools#limitations).
         */
        type?: pulumi.Input<string>;
        /**
         * Used to specify whether the UltraSSD is enabled in the Default Node Pool. Defaults to `false`. See [the documentation](https://docs.microsoft.com/azure/aks/use-ultra-disks) for more information. `temporaryNameForRotation` must be specified when attempting a change.
         */
        ultraSsdEnabled?: pulumi.Input<boolean>;
        /**
         * A `upgradeSettings` block as documented below.
         */
        upgradeSettings?: pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolUpgradeSettings>;
        /**
         * The size of the Virtual Machine, such as `Standard_DS2_v2`. `temporaryNameForRotation` must be specified when attempting a resize.
         */
        vmSize?: pulumi.Input<string>;
        /**
         * The ID of a Subnet where the Kubernetes Node Pool should exist.
         *
         * > **Note:** A Route Table must be configured on this Subnet.
         */
        vnetSubnetId?: pulumi.Input<string>;
        /**
         * Specifies the workload runtime used by the node pool. Possible value is `OCIContainer`.
         */
        workloadRuntime?: pulumi.Input<string>;
        /**
         * Specifies a list of Availability Zones in which this Kubernetes Cluster should be located. `temporaryNameForRotation` must be specified when changing this property.
         *
         * > **Note:** This requires that the `type` is set to `VirtualMachineScaleSets` and that `loadBalancerSku` is set to `standard`.
         */
        zones?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface KubernetesClusterDefaultNodePoolKubeletConfig {
        /**
         * Specifies the allow list of unsafe sysctls command or patterns (ending in `*`).
         */
        allowedUnsafeSysctls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the maximum number of container log files that can be present for a container. must be at least 2.
         */
        containerLogMaxLine?: pulumi.Input<number>;
        /**
         * Specifies the maximum size (e.g. 10MB) of container log file before it is rotated.
         */
        containerLogMaxSizeMb?: pulumi.Input<number>;
        /**
         * Is CPU CFS quota enforcement for containers enabled? Defaults to `true`.
         */
        cpuCfsQuotaEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the CPU CFS quota period value.
         */
        cpuCfsQuotaPeriod?: pulumi.Input<string>;
        /**
         * Specifies the CPU Manager policy to use. Possible values are `none` and `static`,.
         */
        cpuManagerPolicy?: pulumi.Input<string>;
        /**
         * Specifies the percent of disk usage above which image garbage collection is always run. Must be between `0` and `100`.
         */
        imageGcHighThreshold?: pulumi.Input<number>;
        /**
         * Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between `0` and `100`.
         */
        imageGcLowThreshold?: pulumi.Input<number>;
        /**
         * Specifies the maximum number of processes per pod.
         */
        podMaxPid?: pulumi.Input<number>;
        /**
         * Specifies the Topology Manager policy to use. Possible values are `none`, `best-effort`, `restricted` or `single-numa-node`.
         */
        topologyManagerPolicy?: pulumi.Input<string>;
    }
    interface KubernetesClusterDefaultNodePoolLinuxOsConfig {
        /**
         * Specifies the size of the swap file on each node in MB.
         */
        swapFileSizeMb?: pulumi.Input<number>;
        /**
         * A `sysctlConfig` block as defined below.
         */
        sysctlConfig?: pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfig>;
        /**
         * Specifies the Transparent Huge Page configuration. Possible values are `always`, `madvise` and `never`.
         */
        transparentHugePage?: pulumi.Input<string>;
        /**
         * specifies the defrag configuration for Transparent Huge Page. Possible values are `always`, `defer`, `defer+madvise`, `madvise` and `never`.
         */
        transparentHugePageDefrag?: pulumi.Input<string>;
        /**
         * @deprecated this property has been deprecated in favour of `transparentHugePage` and will be removed in version 5.0 of the Provider.
         */
        transparentHugePageEnabled?: pulumi.Input<string>;
    }
    interface KubernetesClusterDefaultNodePoolLinuxOsConfigSysctlConfig {
        /**
         * The sysctl setting fs.aio-max-nr. Must be between `65536` and `6553500`.
         */
        fsAioMaxNr?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.file-max. Must be between `8192` and `12000500`.
         */
        fsFileMax?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.inotify.max_user_watches. Must be between `781250` and `2097152`.
         */
        fsInotifyMaxUserWatches?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.nr_open. Must be between `8192` and `20000500`.
         */
        fsNrOpen?: pulumi.Input<number>;
        /**
         * The sysctl setting kernel.threads-max. Must be between `20` and `513785`.
         */
        kernelThreadsMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.netdev_max_backlog. Must be between `1000` and `3240000`.
         */
        netCoreNetdevMaxBacklog?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.optmem_max. Must be between `20480` and `4194304`.
         */
        netCoreOptmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.rmem_default. Must be between `212992` and `134217728`.
         */
        netCoreRmemDefault?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.rmem_max. Must be between `212992` and `134217728`.
         */
        netCoreRmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.somaxconn. Must be between `4096` and `3240000`.
         */
        netCoreSomaxconn?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.wmem_default. Must be between `212992` and `134217728`.
         */
        netCoreWmemDefault?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.wmem_max. Must be between `212992` and `134217728`.
         */
        netCoreWmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.ip_local_port_range max value. Must be between `32768` and `65535`.
         */
        netIpv4IpLocalPortRangeMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.ip_local_port_range min value. Must be between `1024` and `60999`.
         */
        netIpv4IpLocalPortRangeMin?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between `128` and `80000`.
         */
        netIpv4NeighDefaultGcThresh1?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between `512` and `90000`.
         */
        netIpv4NeighDefaultGcThresh2?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between `1024` and `100000`.
         */
        netIpv4NeighDefaultGcThresh3?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_fin_timeout. Must be between `5` and `120`.
         */
        netIpv4TcpFinTimeout?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between `10` and `90`.
         */
        netIpv4TcpKeepaliveIntvl?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between `1` and `15`.
         */
        netIpv4TcpKeepaliveProbes?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_time. Must be between `30` and `432000`.
         */
        netIpv4TcpKeepaliveTime?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between `128` and `3240000`.
         */
        netIpv4TcpMaxSynBacklog?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between `8000` and `1440000`.
         */
        netIpv4TcpMaxTwBuckets?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_tw_reuse.
         */
        netIpv4TcpTwReuse?: pulumi.Input<boolean>;
        /**
         * The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between `65536` and `524288`.
         */
        netNetfilterNfConntrackBuckets?: pulumi.Input<number>;
        /**
         * The sysctl setting net.netfilter.nf_conntrack_max. Must be between `131072` and `2097152`.
         */
        netNetfilterNfConntrackMax?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.max_map_count. Must be between `65530` and `262144`.
         */
        vmMaxMapCount?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.swappiness. Must be between `0` and `100`.
         */
        vmSwappiness?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.vfs_cache_pressure. Must be between `0` and `100`.
         */
        vmVfsCachePressure?: pulumi.Input<number>;
    }
    interface KubernetesClusterDefaultNodePoolNodeNetworkProfile {
        /**
         * One or more `allowedHostPorts` blocks as defined below.
         */
        allowedHostPorts?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterDefaultNodePoolNodeNetworkProfileAllowedHostPort>[]>;
        /**
         * A list of Application Security Group IDs which should be associated with this Node Pool.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a mapping of tags to the instance-level public IPs. Changing this forces a new resource to be created.
         */
        nodePublicIpTags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface KubernetesClusterDefaultNodePoolNodeNetworkProfileAllowedHostPort {
        /**
         * Specifies the end of the port range.
         */
        portEnd?: pulumi.Input<number>;
        /**
         * Specifies the start of the port range.
         */
        portStart?: pulumi.Input<number>;
        /**
         * Specifies the protocol of the port range. Possible values are `TCP` and `UDP`.
         */
        protocol?: pulumi.Input<string>;
    }
    interface KubernetesClusterDefaultNodePoolUpgradeSettings {
        /**
         * The amount of time in minutes to wait on eviction of pods and graceful termination per node. This eviction wait time honors pod disruption budgets for upgrades. If this time is exceeded, the upgrade fails. Unsetting this after configuring it will force a new resource to be created.
         */
        drainTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
         *
         * > **Note:** If a percentage is provided, the number of surge nodes is calculated from the `nodeCount` value on the current cluster. Node surge can allow a cluster to have more nodes than `maxCount` during an upgrade. Ensure that your cluster has enough [IP space](https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade) during an upgrade.
         */
        maxSurge: pulumi.Input<string>;
        /**
         * The amount of time in minutes to wait after draining a node and before reimaging and moving on to next node.
         *
         * > **Note:** The default value for `nodeSoakDurationInMinutes` is `0`. <!-- The 0 default happens in code, not in Schema -->.
         */
        nodeSoakDurationInMinutes?: pulumi.Input<number>;
        /**
         * Specifies the action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`. Unsetting this after configuring it will force a new resource to be created.
         */
        undrainableNodeBehavior?: pulumi.Input<string>;
    }
    interface KubernetesClusterExtensionAksAssignedIdentity {
        /**
         * The principal ID of resource identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The tenant ID of resource.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The identity type.
         */
        type?: pulumi.Input<string>;
    }
    interface KubernetesClusterExtensionPlan {
        /**
         * Specifies the name of the plan from the marketplace. Changing this forces a new Kubernetes Cluster Extension to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the plan from the marketplace. Changing this forces a new Kubernetes Cluster Extension to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the promotion code to use with the plan. Changing this forces a new Kubernetes Cluster Extension to be created.
         */
        promotionCode?: pulumi.Input<string>;
        /**
         * Specifies the publisher of the plan. Changing this forces a new Kubernetes Cluster Extension to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the version of the plan from the marketplace. Changing this forces a new Kubernetes Cluster Extension to be created.
         *
         * > **Note:** When `plan` is specified, legal terms must be accepted for this item on this subscription before creating the Kubernetes Cluster Extension. The `azure.marketplace.Agreement` resource or AZ CLI tool can be used to do this.
         */
        version?: pulumi.Input<string>;
    }
    interface KubernetesClusterHttpProxyConfig {
        /**
         * The proxy address to be used when communicating over HTTP.
         */
        httpProxy?: pulumi.Input<string>;
        /**
         * The proxy address to be used when communicating over HTTPS.
         */
        httpsProxy?: pulumi.Input<string>;
        /**
         * The list of domains that will not use the proxy for communication.
         *
         * > **Note:** If you specify the `default_node_pool[0].vnet_subnet_id`, be sure to include the Subnet CIDR in the `noProxy` list.
         *
         * > **Note:** You may wish to use Terraform's `ignoreChanges` functionality to ignore the changes to this field.
         */
        noProxies?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The base64 encoded alternative CA certificate content in PEM format.
         */
        trustedCa?: pulumi.Input<string>;
    }
    interface KubernetesClusterIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Kubernetes Cluster.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`. Currently only one User Assigned Identity is supported.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Kubernetes Cluster. Possible values are `SystemAssigned` or `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface KubernetesClusterIngressApplicationGateway {
        /**
         * The ID of the Application Gateway associated with the ingress controller deployed to this Kubernetes Cluster.
         */
        effectiveGatewayId?: pulumi.Input<string>;
        /**
         * The ID of the Application Gateway to integrate with the ingress controller of this Kubernetes Cluster. See [this](https://docs.microsoft.com/azure/application-gateway/tutorial-ingress-controller-add-on-existing) page for further details.
         */
        gatewayId?: pulumi.Input<string>;
        /**
         * The name of the Application Gateway to be used or created in the Nodepool Resource Group, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See [this](https://docs.microsoft.com/azure/application-gateway/tutorial-ingress-controller-add-on-new) page for further details.
         */
        gatewayName?: pulumi.Input<string>;
        /**
         * An `ingressApplicationGatewayIdentity` block is exported. The exported attributes are defined below.
         */
        ingressApplicationGatewayIdentities?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentity>[]>;
        /**
         * The subnet CIDR to be used to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See [this](https://docs.microsoft.com/azure/application-gateway/tutorial-ingress-controller-add-on-new) page for further details.
         */
        subnetCidr?: pulumi.Input<string>;
        /**
         * The ID of the subnet on which to create an Application Gateway, which in turn will be integrated with the ingress controller of this Kubernetes Cluster. See [this](https://docs.microsoft.com/azure/application-gateway/tutorial-ingress-controller-add-on-new) page for further details.
         *
         * > **Note:** Exactly one of `gatewayId`, `subnetId` or `subnetCidr` must be specified.
         *
         * > **Note:** If specifying `ingressApplicationGateway` in conjunction with `onlyCriticalAddonsEnabled`, the AGIC pod will fail to start. A separate `azure.containerservice.KubernetesClusterNodePool` is required to run the AGIC pod successfully. This is because AGIC is classed as a "non-critical addon".
         */
        subnetId?: pulumi.Input<string>;
    }
    interface KubernetesClusterIngressApplicationGatewayIngressApplicationGatewayIdentity {
        /**
         * The Client ID of the user-defined Managed Identity used for Web App Routing.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity used for Web App Routing
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used for Web App Routing.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterKeyManagementService {
        /**
         * Identifier of Azure Key Vault key. See [key identifier format](https://learn.microsoft.com/en-us/azure/key-vault/general/about-keys-secrets-certificates#vault-name-and-object-name) for more details.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * Network access of the key vault Network access of key vault. The possible values are `Public` and `Private`. `Public` means the key vault allows public access from all networks. `Private` means the key vault disables public access and enables private link. Defaults to `Public`.
         */
        keyVaultNetworkAccess?: pulumi.Input<string>;
    }
    interface KubernetesClusterKeyVaultSecretsProvider {
        /**
         * An `secretIdentity` block is exported. The exported attributes are defined below.
         */
        secretIdentities?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterKeyVaultSecretsProviderSecretIdentity>[]>;
        /**
         * Should the secret store CSI driver on the AKS cluster be enabled?
         */
        secretRotationEnabled?: pulumi.Input<boolean>;
        /**
         * The interval to poll for secret rotation. This attribute is only set when `secretRotationEnabled` is true. Defaults to `2m`.
         *
         * > **Note:** To enable`keyVaultSecretsProvider` either `secretRotationEnabled` or `secretRotationInterval` must be specified.
         */
        secretRotationInterval?: pulumi.Input<string>;
    }
    interface KubernetesClusterKeyVaultSecretsProviderSecretIdentity {
        /**
         * The Client ID of the user-defined Managed Identity used for Web App Routing.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity used for Web App Routing
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used for Web App Routing.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterKubeAdminConfig {
        /**
         * Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
         */
        clientCertificate?: pulumi.Input<string>;
        /**
         * Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
         */
        clientKey?: pulumi.Input<string>;
        /**
         * Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
         */
        clusterCaCertificate?: pulumi.Input<string>;
        /**
         * The Kubernetes cluster server host.
         */
        host?: pulumi.Input<string>;
        /**
         * A password or token used to authenticate to the Kubernetes cluster.
         */
        password?: pulumi.Input<string>;
        /**
         * A username used to authenticate to the Kubernetes cluster.
         */
        username?: pulumi.Input<string>;
    }
    interface KubernetesClusterKubeConfig {
        /**
         * Base64 encoded public certificate used by clients to authenticate to the Kubernetes cluster.
         */
        clientCertificate?: pulumi.Input<string>;
        /**
         * Base64 encoded private key used by clients to authenticate to the Kubernetes cluster.
         */
        clientKey?: pulumi.Input<string>;
        /**
         * Base64 encoded public CA certificate used as the root of trust for the Kubernetes cluster.
         */
        clusterCaCertificate?: pulumi.Input<string>;
        /**
         * The Kubernetes cluster server host.
         */
        host?: pulumi.Input<string>;
        /**
         * A password or token used to authenticate to the Kubernetes cluster.
         */
        password?: pulumi.Input<string>;
        /**
         * A username used to authenticate to the Kubernetes cluster.
         */
        username?: pulumi.Input<string>;
    }
    interface KubernetesClusterKubeletIdentity {
        /**
         * The Client ID of the user-defined Managed Identity to be assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity assigned to the Kubelets.If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity assigned to the Kubelets. If not specified a Managed Identity is created automatically. Changing this forces a new resource to be created.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterLinuxProfile {
        /**
         * The Admin Username for the Cluster. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * An `sshKey` block as defined below.
         */
        sshKey: pulumi.Input<inputs.containerservice.KubernetesClusterLinuxProfileSshKey>;
    }
    interface KubernetesClusterLinuxProfileSshKey {
        /**
         * The Public SSH Key used to access the cluster. Changing this forces a new resource to be created.
         */
        keyData: pulumi.Input<string>;
    }
    interface KubernetesClusterMaintenanceWindow {
        /**
         * One or more `allowed` blocks as defined below.
         */
        alloweds?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterMaintenanceWindowAllowed>[]>;
        /**
         * One or more `notAllowed` block as defined below.
         */
        notAlloweds?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterMaintenanceWindowNotAllowed>[]>;
    }
    interface KubernetesClusterMaintenanceWindowAllowed {
        /**
         * A day in a week. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` and `Saturday`.
         */
        day: pulumi.Input<string>;
        /**
         * An array of hour slots in a day. For example, specifying `1` will allow maintenance from 1:00am to 2:00am. Specifying `1`, `2` will allow maintenance from 1:00am to 3:00m. Possible values are between `0` and `23`.
         */
        hours: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface KubernetesClusterMaintenanceWindowAutoUpgrade {
        /**
         * The day of the month for the maintenance run. Required in combination with AbsoluteMonthly frequency. Value between 0 and 31 (inclusive).
         */
        dayOfMonth?: pulumi.Input<number>;
        /**
         * The day of the week for the maintenance run. Required in combination with weekly frequency. Possible values are `Friday`, `Monday`, `Saturday`, `Sunday`, `Thursday`, `Tuesday` and `Wednesday`.
         */
        dayOfWeek?: pulumi.Input<string>;
        /**
         * The duration of the window for maintenance to run in hours. Possible options are between `4` to `24`.
         */
        duration: pulumi.Input<number>;
        /**
         * Frequency of maintenance. Possible options are `Daily`, `Weekly`, `AbsoluteMonthly` and `RelativeMonthly`.
         */
        frequency: pulumi.Input<string>;
        /**
         * The interval for maintenance runs. Depending on the frequency this interval is week or month based.
         */
        interval: pulumi.Input<number>;
        /**
         * One or more `notAllowed` block as defined below.
         */
        notAlloweds?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterMaintenanceWindowAutoUpgradeNotAllowed>[]>;
        /**
         * The date on which the maintenance window begins to take effect.
         */
        startDate?: pulumi.Input<string>;
        /**
         * The time for maintenance to begin, based on the timezone determined by `utcOffset`. Format is `HH:mm`.
         */
        startTime?: pulumi.Input<string>;
        /**
         * Used to determine the timezone for cluster maintenance.
         */
        utcOffset?: pulumi.Input<string>;
        /**
         * Specifies on which instance of the allowed days specified in `dayOfWeek` the maintenance occurs. Options are `First`, `Second`, `Third`, `Fourth`, and `Last`.
         * Required in combination with relative monthly frequency.
         */
        weekIndex?: pulumi.Input<string>;
    }
    interface KubernetesClusterMaintenanceWindowAutoUpgradeNotAllowed {
        /**
         * The end of a time span, formatted as an RFC3339 string.
         */
        end: pulumi.Input<string>;
        /**
         * The start of a time span, formatted as an RFC3339 string.
         */
        start: pulumi.Input<string>;
    }
    interface KubernetesClusterMaintenanceWindowNodeOs {
        /**
         * The day of the month for the maintenance run. Required in combination with AbsoluteMonthly frequency. Value between 0 and 31 (inclusive).
         */
        dayOfMonth?: pulumi.Input<number>;
        /**
         * The day of the week for the maintenance run. Required in combination with weekly frequency. Possible values are `Friday`, `Monday`, `Saturday`, `Sunday`, `Thursday`, `Tuesday` and `Wednesday`.
         */
        dayOfWeek?: pulumi.Input<string>;
        /**
         * The duration of the window for maintenance to run in hours. Possible options are between `4` to `24`.
         */
        duration: pulumi.Input<number>;
        /**
         * Frequency of maintenance. Possible options are `Daily`, `Weekly`, `AbsoluteMonthly` and `RelativeMonthly`.
         */
        frequency: pulumi.Input<string>;
        /**
         * The interval for maintenance runs. Depending on the frequency this interval is week or month based.
         */
        interval: pulumi.Input<number>;
        /**
         * One or more `notAllowed` block as defined below.
         */
        notAlloweds?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterMaintenanceWindowNodeOsNotAllowed>[]>;
        /**
         * The date on which the maintenance window begins to take effect.
         */
        startDate?: pulumi.Input<string>;
        /**
         * The time for maintenance to begin, based on the timezone determined by `utcOffset`. Format is `HH:mm`.
         */
        startTime?: pulumi.Input<string>;
        /**
         * Used to determine the timezone for cluster maintenance.
         */
        utcOffset?: pulumi.Input<string>;
        /**
         * The week in the month used for the maintenance run. Options are `First`, `Second`, `Third`, `Fourth`, and `Last`.
         */
        weekIndex?: pulumi.Input<string>;
    }
    interface KubernetesClusterMaintenanceWindowNodeOsNotAllowed {
        /**
         * The end of a time span, formatted as an RFC3339 string.
         */
        end: pulumi.Input<string>;
        /**
         * The start of a time span, formatted as an RFC3339 string.
         */
        start: pulumi.Input<string>;
    }
    interface KubernetesClusterMaintenanceWindowNotAllowed {
        /**
         * The end of a time span, formatted as an RFC3339 string.
         */
        end: pulumi.Input<string>;
        /**
         * The start of a time span, formatted as an RFC3339 string.
         */
        start: pulumi.Input<string>;
    }
    interface KubernetesClusterMicrosoftDefender {
        /**
         * Specifies the ID of the Log Analytics Workspace where the audit logs collected by Microsoft Defender should be sent to.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
    }
    interface KubernetesClusterMonitorMetrics {
        /**
         * Specifies a comma-separated list of Kubernetes annotation keys that will be used in the resource's labels metric.
         */
        annotationsAllowed?: pulumi.Input<string>;
        /**
         * Specifies a Comma-separated list of additional Kubernetes label keys that will be used in the resource's labels metric.
         *
         * > **Note:** Both properties `annotationsAllowed` and `labelsAllowed` are required if you are enabling Managed Prometheus with an existing Azure Monitor Workspace.
         */
        labelsAllowed?: pulumi.Input<string>;
    }
    interface KubernetesClusterNetworkProfile {
        /**
         * An `advancedNetworking` block as defined below.
         */
        advancedNetworking?: pulumi.Input<inputs.containerservice.KubernetesClusterNetworkProfileAdvancedNetworking>;
        /**
         * IP address within the Kubernetes service address range that will be used by cluster service discovery (kube-dns). Changing this forces a new resource to be created.
         */
        dnsServiceIp?: pulumi.Input<string>;
        /**
         * Specifies a list of IP versions the Kubernetes Cluster will use to assign IP addresses to its nodes and pods. Possible values are `IPv4` and/or `IPv6`. `IPv4` must always be specified. Changing this forces a new resource to be created.
         *
         * ->**Note:** To configure dual-stack networking `ipVersions` should be set to `["IPv4", "IPv6"]`.
         *
         * ->**Note:** Dual-stack networking requires that the Preview Feature `Microsoft.ContainerService/AKS-EnableDualStack` is enabled and the Resource Provider is re-registered, see [the documentation](https://docs.microsoft.com/azure/aks/configure-kubenet-dual-stack?tabs=azure-cli%2Ckubectl#register-the-aks-enabledualstack-preview-feature) for more information.
         */
        ipVersions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `loadBalancerProfile` block as defined below. This can only be specified when `loadBalancerSku` is set to `standard`. Changing this forces a new resource to be created.
         */
        loadBalancerProfile?: pulumi.Input<inputs.containerservice.KubernetesClusterNetworkProfileLoadBalancerProfile>;
        /**
         * Specifies the SKU of the Load Balancer used for this Kubernetes Cluster. Possible values are `basic` and `standard`. Defaults to `standard`. Changing this forces a new resource to be created.
         */
        loadBalancerSku?: pulumi.Input<string>;
        /**
         * A `natGatewayProfile` block as defined below. This can only be specified when `loadBalancerSku` is set to `standard` and `outboundType` is set to `managedNATGateway` or `userAssignedNATGateway`. Changing this forces a new resource to be created.
         */
        natGatewayProfile?: pulumi.Input<inputs.containerservice.KubernetesClusterNetworkProfileNatGatewayProfile>;
        /**
         * Specifies the data plane used for building the Kubernetes network. Possible values are `azure` and `cilium`. Defaults to `azure`. Disabling this forces a new resource to be created.
         *
         * > **Note:** When `networkDataPlane` is set to `cilium`, the `networkPlugin` field can only be set to `azure`.
         *
         * > **Note:** When `networkDataPlane` is set to `cilium`, one of either `networkPluginMode = "overlay"` or `podSubnetId` must be specified.
         *
         * > **Note:** Upgrading `networkDataPlane` from `azure` to `cilium` is supported and will perform an in-place upgrade by reimaging all nodes in the cluster. Changing from other values will force a new resource to be created. For more information on upgrading to Azure CNI Powered by Cilium see the [product documentation](https://learn.microsoft.com/azure/aks/upgrade-azure-cni).
         */
        networkDataPlane?: pulumi.Input<string>;
        /**
         * Network mode to be used with Azure CNI. Possible values are `bridge` and `transparent`. Changing this forces a new resource to be created.
         *
         * > **Note:** `networkMode` can only be set to `bridge` for existing Kubernetes Clusters and cannot be used to provision new Clusters - this will be removed by Azure in the future.
         *
         * > **Note:** This property can only be set when `networkPlugin` is set to `azure`.
         */
        networkMode?: pulumi.Input<string>;
        /**
         * Network plugin to use for networking. Currently supported values are `azure`, `kubenet` and `none`
         *
         * > **Note:** When `networkPlugin` is set to `azure` - the `podCidr` field must not be set, unless specifying `networkPluginMode` to `overlay`.
         *
         * > **Note:** Changing `networkPlugin` forces a new resource to be created, except when upgrading from `kubenet` to `azure` with `networkPluginMode` set to `overlay`.
         */
        networkPlugin: pulumi.Input<string>;
        /**
         * Specifies the network plugin mode used for building the Kubernetes network. Possible value is `overlay`.
         *
         * > **Note:** When `networkPluginMode` is set to `overlay`, the `networkPlugin` field can only be set to `azure`. When upgrading from Azure CNI without overlay, `podSubnetId` must be specified.
         */
        networkPluginMode?: pulumi.Input<string>;
        /**
         * Sets up network policy to be used with Azure CNI. [Network policy allows us to control the traffic flow between pods](https://docs.microsoft.com/azure/aks/use-network-policies). Currently supported values are `calico`, `azure` and `cilium`.
         *
         * > **Note:** When `networkPolicy` is set to `azure`, the `networkPlugin` field can only be set to `azure`.
         *
         * > **Note:** When `networkPolicy` is set to `cilium`, the `networkDataPlane` field must be set to `cilium`.
         *
         * > **Note:** Upgrading `networkPolicy` from `azure` or `calico` to `cilium` is supported and will perform an in-place upgrade. Changing from other values will force a new resource to be created.
         */
        networkPolicy?: pulumi.Input<string>;
        /**
         * The outbound (egress) routing method which should be used for this Kubernetes Cluster. Possible values are `loadBalancer`, `userDefinedRouting`, `managedNATGateway`, `userAssignedNATGateway` and `none`. Defaults to `loadBalancer`.
         *
         * > **Note:** For more information on supported `outboundType` migration paths please see the product [documentation](https://learn.microsoft.com/azure/aks/egress-outboundtype#updating-outboundtype-after-cluster-creation).
         */
        outboundType?: pulumi.Input<string>;
        /**
         * The CIDR to use for pod IP addresses. This field can only be set when `networkPlugin` is set to `kubenet` or `networkPluginMode` is set to `overlay`.
         *
         * > **Note:** Once `podCidr` has been set, changing it forces a new resource to be created.
         */
        podCidr?: pulumi.Input<string>;
        /**
         * A list of CIDRs to use for pod IP addresses. For single-stack networking a single IPv4 CIDR is expected. For dual-stack networking an IPv4 and IPv6 CIDR are expected.
         *
         * > **Note:** Once `podCidrs` has been set, changing it forces a new resource to be created.
         */
        podCidrs?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Network Range used by the Kubernetes service. Changing this forces a new resource to be created.
         */
        serviceCidr?: pulumi.Input<string>;
        /**
         * A list of CIDRs to use for Kubernetes services. For single-stack networking a single IPv4 CIDR is expected. For dual-stack networking an IPv4 and IPv6 CIDR are expected. Changing this forces a new resource to be created.
         *
         * > **Note:** This range should not be used by any network element on or connected to this VNet. Service address CIDR must be smaller than /12. `dockerBridgeCidr`, `dnsServiceIp` and `serviceCidr` should all be empty or all should be set.
         */
        serviceCidrs?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface KubernetesClusterNetworkProfileAdvancedNetworking {
        /**
         * Is observability enabled? Defaults to `false`.
         */
        observabilityEnabled?: pulumi.Input<boolean>;
        /**
         * Is security enabled? Defaults to `false`. This can only be enabled (set to `true`) when `networkPlugin` is set to `azure` and `networkDataPlane` is set to `cilium`.
         */
        securityEnabled?: pulumi.Input<boolean>;
    }
    interface KubernetesClusterNetworkProfileLoadBalancerProfile {
        /**
         * The type of the managed inbound Load Balancer Backend Pool. Possible values are `NodeIP` and `NodeIPConfiguration`. Defaults to `NodeIPConfiguration`. See [the documentation](https://learn.microsoft.com/en-us/azure/aks/load-balancer-standard#change-the-inbound-pool-type) for more information.
         */
        backendPoolType?: pulumi.Input<string>;
        /**
         * The outcome (resource IDs) of the specified arguments.
         */
        effectiveOutboundIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Desired outbound flow idle timeout in minutes for the cluster load balancer. Must be between `4` and `100` inclusive. Defaults to `30`.
         */
        idleTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * Count of desired managed outbound IPs for the cluster load balancer. Must be between `1` and `100` inclusive.
         */
        managedOutboundIpCount?: pulumi.Input<number>;
        /**
         * The desired number of IPv6 outbound IPs created and managed by Azure for the cluster load balancer. Must be in the range of 1 to 100 (inclusive). The default value is 0 for single-stack and 1 for dual-stack.
         *
         * > **Note:** `managedOutboundIpv6Count` requires dual-stack networking. To enable dual-stack networking the Preview Feature `Microsoft.ContainerService/AKS-EnableDualStack` needs to be enabled and the Resource Provider re-registered, see [the documentation](https://docs.microsoft.com/azure/aks/configure-kubenet-dual-stack?tabs=azure-cli%2Ckubectl#register-the-aks-enabledualstack-preview-feature) for more information.
         */
        managedOutboundIpv6Count?: pulumi.Input<number>;
        /**
         * The ID of the Public IP Addresses which should be used for outbound communication for the cluster load balancer.
         *
         * > **Note:** Set `outboundIpAddressIds` to an empty slice `[]` in order to unlink it from the cluster. Unlinking a `outboundIpAddressIds` will revert the load balancing for the cluster back to a managed one.
         */
        outboundIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the outbound Public IP Address Prefixes which should be used for the cluster load balancer.
         *
         * > **Note:** Set `outboundIpPrefixIds` to an empty slice `[]` in order to unlink it from the cluster. Unlinking a `outboundIpPrefixIds` will revert the load balancing for the cluster back to a managed one.
         */
        outboundIpPrefixIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Number of desired SNAT port for each VM in the clusters load balancer. Must be between `0` and `64000` inclusive. Defaults to `0`.
         */
        outboundPortsAllocated?: pulumi.Input<number>;
    }
    interface KubernetesClusterNetworkProfileNatGatewayProfile {
        /**
         * The outcome (resource IDs) of the specified arguments.
         */
        effectiveOutboundIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Desired outbound flow idle timeout in minutes for the managed nat gateway. Must be between `4` and `120` inclusive. Defaults to `4`.
         */
        idleTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * Count of desired managed outbound IPs for the managed nat gateway. Must be between `1` and `16` inclusive.
         */
        managedOutboundIpCount?: pulumi.Input<number>;
    }
    interface KubernetesClusterNodePoolKubeletConfig {
        /**
         * Specifies the allow list of unsafe sysctls command or patterns (ending in `*`).
         */
        allowedUnsafeSysctls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the maximum number of container log files that can be present for a container. must be at least 2.
         */
        containerLogMaxLine?: pulumi.Input<number>;
        /**
         * Specifies the maximum size (e.g. 10MB) of container log file before it is rotated.
         */
        containerLogMaxSizeMb?: pulumi.Input<number>;
        /**
         * Is CPU CFS quota enforcement for containers enabled? Defaults to `true`.
         */
        cpuCfsQuotaEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the CPU CFS quota period value.
         */
        cpuCfsQuotaPeriod?: pulumi.Input<string>;
        /**
         * Specifies the CPU Manager policy to use. Possible values are `none` and `static`,
         */
        cpuManagerPolicy?: pulumi.Input<string>;
        /**
         * Specifies the percent of disk usage above which image garbage collection is always run. Must be between `0` and `100`.
         */
        imageGcHighThreshold?: pulumi.Input<number>;
        /**
         * Specifies the percent of disk usage lower than which image garbage collection is never run. Must be between `0` and `100`.
         */
        imageGcLowThreshold?: pulumi.Input<number>;
        /**
         * Specifies the maximum number of processes per pod.
         */
        podMaxPid?: pulumi.Input<number>;
        /**
         * Specifies the Topology Manager policy to use. Possible values are `none`, `best-effort`, `restricted` or `single-numa-node`.
         */
        topologyManagerPolicy?: pulumi.Input<string>;
    }
    interface KubernetesClusterNodePoolLinuxOsConfig {
        /**
         * Specifies the size of swap file on each node in MB.
         */
        swapFileSizeMb?: pulumi.Input<number>;
        /**
         * A `sysctlConfig` block as defined below.
         */
        sysctlConfig?: pulumi.Input<inputs.containerservice.KubernetesClusterNodePoolLinuxOsConfigSysctlConfig>;
        /**
         * Specifies the Transparent Huge Page configuration. Possible values are `always`, `madvise` and `never`.
         */
        transparentHugePage?: pulumi.Input<string>;
        /**
         * specifies the defrag configuration for Transparent Huge Page. Possible values are `always`, `defer`, `defer+madvise`, `madvise` and `never`.
         */
        transparentHugePageDefrag?: pulumi.Input<string>;
        /**
         * @deprecated this property has been deprecated in favour of `transparentHugePage` and will be removed in version 5.0 of the Provider.
         */
        transparentHugePageEnabled?: pulumi.Input<string>;
    }
    interface KubernetesClusterNodePoolLinuxOsConfigSysctlConfig {
        /**
         * The sysctl setting fs.aio-max-nr. Must be between `65536` and `6553500`.
         */
        fsAioMaxNr?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.file-max. Must be between `8192` and `12000500`.
         */
        fsFileMax?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.inotify.max_user_watches. Must be between `781250` and `2097152`.
         */
        fsInotifyMaxUserWatches?: pulumi.Input<number>;
        /**
         * The sysctl setting fs.nr_open. Must be between `8192` and `20000500`.
         */
        fsNrOpen?: pulumi.Input<number>;
        /**
         * The sysctl setting kernel.threads-max. Must be between `20` and `513785`.
         */
        kernelThreadsMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.netdev_max_backlog. Must be between `1000` and `3240000`.
         */
        netCoreNetdevMaxBacklog?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.optmem_max. Must be between `20480` and `4194304`.
         */
        netCoreOptmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.rmem_default. Must be between `212992` and `134217728`.
         */
        netCoreRmemDefault?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.rmem_max. Must be between `212992` and `134217728`.
         */
        netCoreRmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.somaxconn. Must be between `4096` and `3240000`.
         */
        netCoreSomaxconn?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.wmem_default. Must be between `212992` and `134217728`.
         */
        netCoreWmemDefault?: pulumi.Input<number>;
        /**
         * The sysctl setting net.core.wmem_max. Must be between `212992` and `134217728`.
         */
        netCoreWmemMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.ip_local_port_range max value. Must be between `32768` and `65535`.
         */
        netIpv4IpLocalPortRangeMax?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.ip_local_port_range min value. Must be between `1024` and `60999`.
         */
        netIpv4IpLocalPortRangeMin?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh1. Must be between `128` and `80000`.
         */
        netIpv4NeighDefaultGcThresh1?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh2. Must be between `512` and `90000`.
         */
        netIpv4NeighDefaultGcThresh2?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.neigh.default.gc_thresh3. Must be between `1024` and `100000`.
         */
        netIpv4NeighDefaultGcThresh3?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_fin_timeout. Must be between `5` and `120`.
         */
        netIpv4TcpFinTimeout?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_intvl. Must be between `10` and `90`.
         */
        netIpv4TcpKeepaliveIntvl?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_probes. Must be between `1` and `15`.
         */
        netIpv4TcpKeepaliveProbes?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_keepalive_time. Must be between `30` and `432000`.
         */
        netIpv4TcpKeepaliveTime?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_max_syn_backlog. Must be between `128` and `3240000`.
         */
        netIpv4TcpMaxSynBacklog?: pulumi.Input<number>;
        /**
         * The sysctl setting net.ipv4.tcp_max_tw_buckets. Must be between `8000` and `1440000`.
         */
        netIpv4TcpMaxTwBuckets?: pulumi.Input<number>;
        /**
         * Is sysctl setting net.ipv4.tcp_tw_reuse enabled?
         */
        netIpv4TcpTwReuse?: pulumi.Input<boolean>;
        /**
         * The sysctl setting net.netfilter.nf_conntrack_buckets. Must be between `65536` and `524288`.
         */
        netNetfilterNfConntrackBuckets?: pulumi.Input<number>;
        /**
         * The sysctl setting net.netfilter.nf_conntrack_max. Must be between `131072` and `2097152`.
         */
        netNetfilterNfConntrackMax?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.max_map_count. Must be between `65530` and `262144`.
         */
        vmMaxMapCount?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.swappiness. Must be between `0` and `100`.
         */
        vmSwappiness?: pulumi.Input<number>;
        /**
         * The sysctl setting vm.vfs_cache_pressure. Must be between `0` and `100`.
         */
        vmVfsCachePressure?: pulumi.Input<number>;
    }
    interface KubernetesClusterNodePoolNodeNetworkProfile {
        /**
         * One or more `allowedHostPorts` blocks as defined below.
         */
        allowedHostPorts?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterNodePoolNodeNetworkProfileAllowedHostPort>[]>;
        /**
         * A list of Application Security Group IDs which should be associated with this Node Pool.
         */
        applicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a mapping of tags to the instance-level public IPs. Changing this forces a new resource to be created.
         *
         * > **Note:** To set the application security group, you must allow at least one host port. Without this, the configuration will fail silently. [Learn More](https://learn.microsoft.com/en-us/azure/aks/use-node-public-ips#allow-host-port-connections-and-add-node-pools-to-application-security-groups).
         */
        nodePublicIpTags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface KubernetesClusterNodePoolNodeNetworkProfileAllowedHostPort {
        /**
         * Specifies the end of the port range.
         */
        portEnd?: pulumi.Input<number>;
        /**
         * Specifies the start of the port range.
         */
        portStart?: pulumi.Input<number>;
        /**
         * Specifies the protocol of the port range. Possible values are `TCP` and `UDP`.
         */
        protocol?: pulumi.Input<string>;
    }
    interface KubernetesClusterNodePoolUpgradeSettings {
        /**
         * The amount of time in minutes to wait on eviction of pods and graceful termination per node. This eviction wait time honors waiting on pod disruption budgets. If this time is exceeded, the upgrade fails. Unsetting this after configuring it will force a new resource to be created.
         */
        drainTimeoutInMinutes?: pulumi.Input<number>;
        /**
         * The maximum number or percentage of nodes which will be added to the Node Pool size during an upgrade.
         */
        maxSurge?: pulumi.Input<string>;
        /**
         * The maximum number or percentage of nodes which can be unavailable during the upgrade.
         *
         * > **Note:** Exactly one of `maxSurge` or `maxUnavailable` must be specified, unless `priority` is set to `Spot`. Spot node pools do not support `maxSurge` or `maxUnavailable`.
         */
        maxUnavailable?: pulumi.Input<string>;
        /**
         * The amount of time in minutes to wait after draining a node and before reimaging and moving on to next node.
         */
        nodeSoakDurationInMinutes?: pulumi.Input<number>;
        /**
         * Specifies the action when a node is undrainable during upgrade. Possible values are `Cordon` and `Schedule`. Unsetting this after configuring it will force a new resource to be created.
         */
        undrainableNodeBehavior?: pulumi.Input<string>;
    }
    interface KubernetesClusterNodePoolWindowsProfile {
        /**
         * Should the Windows nodes in this Node Pool have outbound NAT enabled? Defaults to `true`. Changing this forces a new resource to be created.
         *
         * > **Note:** If a percentage is provided, the number of surge nodes is calculated from the current node count on the cluster. Node surge can allow a cluster to have more nodes than `maxCount` during an upgrade. Ensure that your cluster has enough [IP space](https://docs.microsoft.com/azure/aks/upgrade-cluster#customize-node-surge-upgrade) during an upgrade.
         */
        outboundNatEnabled?: pulumi.Input<boolean>;
    }
    interface KubernetesClusterNodeProvisioningProfile {
        /**
         * Specifies whether default node pools should be provisioned automatically. Possible values are `Auto` and `None`. Defaults to `Auto`. At least one of `mode` or `defaultNodePools` must be specified.
         */
        defaultNodePools?: pulumi.Input<string>;
        mode?: pulumi.Input<string>;
    }
    interface KubernetesClusterOmsAgent {
        /**
         * The ID of the Log Analytics Workspace which the OMS Agent should send data to.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * Is managed identity authentication for monitoring enabled?
         */
        msiAuthForMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * An `omsAgentIdentity` block is exported. The exported attributes are defined below.
         */
        omsAgentIdentities?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterOmsAgentOmsAgentIdentity>[]>;
    }
    interface KubernetesClusterOmsAgentOmsAgentIdentity {
        /**
         * The Client ID of the user-defined Managed Identity used for Web App Routing.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity used for Web App Routing
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used for Web App Routing.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterServiceMeshProfile {
        /**
         * A `certificateAuthority` block as defined below. When this property is specified, `keyVaultSecretsProvider` is also required to be set. This configuration allows you to bring your own root certificate and keys for Istio CA in the Istio-based service mesh add-on for Azure Kubernetes Service.
         */
        certificateAuthority?: pulumi.Input<inputs.containerservice.KubernetesClusterServiceMeshProfileCertificateAuthority>;
        /**
         * Is Istio External Ingress Gateway enabled?
         *
         * > **NOTE:** Currently only one Internal Ingress Gateway and one External Ingress Gateway are allowed per cluster
         */
        externalIngressGatewayEnabled?: pulumi.Input<boolean>;
        /**
         * Is Istio Internal Ingress Gateway enabled?
         */
        internalIngressGatewayEnabled?: pulumi.Input<boolean>;
        /**
         * The mode of the service mesh. Possible value is `Istio`.
         */
        mode: pulumi.Input<string>;
        /**
         * Specify 1 or 2 Istio control plane revisions for managing minor upgrades using the canary upgrade process. For example, create the resource with `revisions` set to `["asm-1-25"]`, or leave it empty (the `revisions` will only be known after apply). To start the canary upgrade, change `revisions` to `["asm-1-25", "asm-1-26"]`. To roll back the canary upgrade, revert to `["asm-1-25"]`. To confirm the upgrade, change to `["asm-1-26"]`.
         *
         * > **NOTE:** Upgrading to a new (canary) revision does not affect existing sidecar proxies. You need to apply the canary revision label to selected namespaces and restart pods with kubectl to inject the new sidecar proxy. [Learn more](https://istio.io/latest/docs/setup/upgrade/canary/#data-plane).
         */
        revisions: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface KubernetesClusterServiceMeshProfileCertificateAuthority {
        /**
         * The certificate chain object name in Azure Key Vault.
         */
        certChainObjectName: pulumi.Input<string>;
        /**
         * The intermediate certificate object name in Azure Key Vault.
         */
        certObjectName: pulumi.Input<string>;
        /**
         * The intermediate certificate private key object name in Azure Key Vault.
         *
         * > **Note:** For more information on [Istio-based service mesh add-on with plug-in CA certificates and how to generate these certificates](https://learn.microsoft.com/en-us/azure/aks/istio-plugin-ca),
         */
        keyObjectName: pulumi.Input<string>;
        /**
         * The resource ID of the Key Vault.
         */
        keyVaultId: pulumi.Input<string>;
        /**
         * The root certificate object name in Azure Key Vault.
         */
        rootCertObjectName: pulumi.Input<string>;
    }
    interface KubernetesClusterServicePrincipal {
        /**
         * The Client ID for the Service Principal.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Service Principal.
         */
        clientSecret: pulumi.Input<string>;
    }
    interface KubernetesClusterStorageProfile {
        /**
         * Is the Blob CSI driver enabled? Defaults to `false`.
         */
        blobDriverEnabled?: pulumi.Input<boolean>;
        /**
         * Is the Disk CSI driver enabled? Defaults to `true`.
         */
        diskDriverEnabled?: pulumi.Input<boolean>;
        /**
         * Is the File CSI driver enabled? Defaults to `true`.
         */
        fileDriverEnabled?: pulumi.Input<boolean>;
        /**
         * Is the Snapshot Controller enabled? Defaults to `true`.
         */
        snapshotControllerEnabled?: pulumi.Input<boolean>;
    }
    interface KubernetesClusterUpgradeOverride {
        /**
         * Specifies the duration, in RFC 3339 format (e.g., `2025-10-01T13:00:00Z`), the `upgradeOverride` values are effective. This field must be set for the `upgradeOverride` values to take effect. The date-time must be within the next 30 days.
         *
         * > **Note:** This only matches the start time of an upgrade, and the effectiveness won't change once an upgrade starts even if the `effectiveUntil` value expires as the upgrade proceeds.
         */
        effectiveUntil?: pulumi.Input<string>;
        /**
         * Whether to force upgrade the cluster. Possible values are `true` or `false`.
         *
         * !> **Note:** The `forceUpgradeEnabled` field instructs the upgrade operation to bypass upgrade protections (e.g. checking for deprecated API usage) which may render the cluster inoperative after the upgrade process has completed. Use the `forceUpgradeEnabled` option with extreme caution only.
         */
        forceUpgradeEnabled: pulumi.Input<boolean>;
    }
    interface KubernetesClusterWebAppRouting {
        /**
         * Specifies the ingress type for the default `NginxIngressController` custom resource. The allowed values are `None`, `Internal`, `External` and `AnnotationControlled`. Defaults to `AnnotationControlled`.
         */
        defaultNginxController?: pulumi.Input<string>;
        /**
         * Specifies the list of the DNS Zone IDs in which DNS entries are created for applications deployed to the cluster when Web App Routing is enabled. If not using Bring-Your-Own DNS zones this property should be set to an empty list.
         */
        dnsZoneIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `webAppRoutingIdentity` block is exported. The exported attributes are defined below.
         */
        webAppRoutingIdentities?: pulumi.Input<pulumi.Input<inputs.containerservice.KubernetesClusterWebAppRoutingWebAppRoutingIdentity>[]>;
    }
    interface KubernetesClusterWebAppRoutingWebAppRoutingIdentity {
        /**
         * The Client ID of the user-defined Managed Identity used for Web App Routing.
         */
        clientId?: pulumi.Input<string>;
        /**
         * The Object ID of the user-defined Managed Identity used for Web App Routing
         */
        objectId?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used for Web App Routing.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface KubernetesClusterWindowsProfile {
        /**
         * The Admin Password for Windows VMs. Length must be between 14 and 123 characters.
         */
        adminPassword: pulumi.Input<string>;
        /**
         * The Admin Username for Windows VMs. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * A `gmsa` block as defined below.
         */
        gmsa?: pulumi.Input<inputs.containerservice.KubernetesClusterWindowsProfileGmsa>;
        /**
         * Specifies the type of on-premise license which should be used for Node Pool Windows Virtual Machine. At this time the only possible value is `Windows_Server`.
         */
        license?: pulumi.Input<string>;
    }
    interface KubernetesClusterWindowsProfileGmsa {
        /**
         * Specifies the DNS server for Windows gMSA. Set this to an empty string if you have configured the DNS server in the VNet which was used to create the managed cluster.
         */
        dnsServer: pulumi.Input<string>;
        /**
         * Specifies the root domain name for Windows gMSA. Set this to an empty string if you have configured the DNS server in the VNet which was used to create the managed cluster.
         *
         * > **Note:** The properties `dnsServer` and `rootDomain` must both either be set or unset, i.e. empty.
         */
        rootDomain: pulumi.Input<string>;
    }
    interface KubernetesClusterWorkloadAutoscalerProfile {
        /**
         * Specifies whether KEDA Autoscaler can be used for workloads.
         */
        kedaEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies whether Vertical Pod Autoscaler should be enabled.
         */
        verticalPodAutoscalerEnabled?: pulumi.Input<boolean>;
    }
    interface KubernetesFleetManagerHubProfile {
        dnsPrefix: pulumi.Input<string>;
        fqdn?: pulumi.Input<string>;
        kubernetesVersion?: pulumi.Input<string>;
    }
    interface RegistryCredentialSetAuthenticationCredentials {
        /**
         * The URI of the secret containing the password in a Key Vault.
         *
         * > **Note:** Be aware that you will need to permit the Identity that is created for the Container Registry to have `get` on secrets to the Key Vault, e.g. using the `azure.keyvault.AccessPolicy` resource.
         */
        passwordSecretId: pulumi.Input<string>;
        /**
         * The URI of the secret containing the username in a Key Vault.
         */
        usernameSecretId: pulumi.Input<string>;
    }
    interface RegistryCredentialSetIdentity {
        /**
         * The principal ID of the Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The tenant ID of the Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of Managed Service Identity that is configured on for the Container Registry Credential Set. Currently the only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface RegistryEncryption {
        /**
         * The client ID of the managed identity associated with the encryption key.
         */
        identityClientId: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Key.
         */
        keyVaultKeyId: pulumi.Input<string>;
    }
    interface RegistryGeoreplication {
        /**
         * A location where the container registry should be geo-replicated.
         */
        location: pulumi.Input<string>;
        /**
         * Whether regional endpoint is enabled for this Container Registry?
         */
        regionalEndpointEnabled?: pulumi.Input<boolean>;
        /**
         * A mapping of tags to assign to this replication location.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Whether zone redundancy is enabled for this replication location? Defaults to `false`.
         *
         * > **Note:** Changing the `zoneRedundancyEnabled` forces an underlying replication to be created.
         */
        zoneRedundancyEnabled?: pulumi.Input<boolean>;
    }
    interface RegistryIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Container Registry. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface RegistryNetworkRuleSet {
        /**
         * The behaviour for requests matching no rules. Either `Allow` or `Deny`. Defaults to `Allow`
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRule` blocks as defined below.
         *
         * > **Note:** `networkRuleSet` is only supported with the `Premium` SKU at this time.
         *
         * > **Note:** Azure automatically configures Network Rules - to remove these, you'll need to specify an `networkRuleSet` block with `defaultAction` set to `Deny`.
         */
        ipRules?: pulumi.Input<pulumi.Input<inputs.containerservice.RegistryNetworkRuleSetIpRule>[]>;
    }
    interface RegistryNetworkRuleSetIpRule {
        /**
         * The behaviour for requests matching this rule. At this time the only supported value is `Allow`
         */
        action: pulumi.Input<string>;
        /**
         * The CIDR block from which requests will match the rule.
         */
        ipRange: pulumi.Input<string>;
    }
    interface RegistryTaskAgentSetting {
        /**
         * The number of cores required for the Container Registry Task. Possible value is `2`.
         */
        cpu: pulumi.Input<number>;
    }
    interface RegistryTaskBaseImageTrigger {
        /**
         * Should the trigger be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this trigger.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the trigger. Possible values are `All` and `Runtime`.
         */
        type: pulumi.Input<string>;
        /**
         * The endpoint URL for receiving the trigger.
         */
        updateTriggerEndpoint?: pulumi.Input<string>;
        /**
         * Type of payload body for the trigger. Possible values are `Default` and `Token`.
         */
        updateTriggerPayloadType?: pulumi.Input<string>;
    }
    interface RegistryTaskDockerStep {
        /**
         * Specifies a map of arguments to be used when executing this step.
         */
        arguments?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Should the image cache be enabled? Defaults to `true`.
         */
        cacheEnabled?: pulumi.Input<boolean>;
        /**
         * The token (Git PAT or SAS token of storage account blob) associated with the context for this step.
         */
        contextAccessToken: pulumi.Input<string>;
        /**
         * The URL (absolute or relative) of the source context for this step. If the context is an url you can reference a specific branch or folder via `#branch:folder`.
         */
        contextPath: pulumi.Input<string>;
        /**
         * The Dockerfile path relative to the source context.
         */
        dockerfilePath: pulumi.Input<string>;
        /**
         * Specifies a list of fully qualified image names including the repository and tag.
         */
        imageNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the image built be pushed to the registry or not? Defaults to `true`.
         */
        pushEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies a map of *secret* arguments to be used when executing this step.
         */
        secretArguments?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of the target build stage for the docker build.
         */
        target?: pulumi.Input<string>;
    }
    interface RegistryTaskEncodedStep {
        /**
         * The token (Git PAT or SAS token of storage account blob) associated with the context for this step.
         */
        contextAccessToken?: pulumi.Input<string>;
        /**
         * The URL (absolute or relative) of the source context for this step.
         */
        contextPath?: pulumi.Input<string>;
        /**
         * Specifies a map of secret values that can be passed when running a task.
         */
        secretValues?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The (optionally base64 encoded) content of the build template.
         */
        taskContent: pulumi.Input<string>;
        /**
         * The (optionally base64 encoded) content of the build parameters.
         */
        valueContent?: pulumi.Input<string>;
        /**
         * Specifies a map of values that can be passed when running a task.
         */
        values?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface RegistryTaskFileStep {
        /**
         * The token (Git PAT or SAS token of storage account blob) associated with the context for this step.
         */
        contextAccessToken?: pulumi.Input<string>;
        /**
         * The URL (absolute or relative) of the source context for this step.
         */
        contextPath?: pulumi.Input<string>;
        /**
         * Specifies a map of secret values that can be passed when running a task.
         */
        secretValues?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The task template file path relative to the source context.
         */
        taskFilePath: pulumi.Input<string>;
        /**
         * The parameters file path relative to the source context.
         */
        valueFilePath?: pulumi.Input<string>;
        /**
         * Specifies a map of values that can be passed when running a task.
         */
        values?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface RegistryTaskIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Container Registry Task.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Container Registry Task. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface RegistryTaskPlatform {
        /**
         * The OS architecture. Possible values are `amd64`, `x86`, `386`, `arm` and `arm64`.
         */
        architecture?: pulumi.Input<string>;
        /**
         * The operating system type required for the task. Possible values are `Windows` and `Linux`.
         */
        os: pulumi.Input<string>;
        /**
         * The variant of the CPU. Possible values are `v6`, `v7`, `v8`.
         */
        variant?: pulumi.Input<string>;
    }
    interface RegistryTaskRegistryCredential {
        /**
         * One or more `custom` blocks as defined above.
         */
        customs?: pulumi.Input<pulumi.Input<inputs.containerservice.RegistryTaskRegistryCredentialCustom>[]>;
        /**
         * One `source` block as defined below.
         */
        source?: pulumi.Input<inputs.containerservice.RegistryTaskRegistryCredentialSource>;
    }
    interface RegistryTaskRegistryCredentialCustom {
        /**
         * The managed identity assigned to this custom credential. For user assigned identity, the value is the client ID of the identity. For system assigned identity, the value is `[system]`.
         */
        identity?: pulumi.Input<string>;
        /**
         * The login server of the custom Container Registry.
         */
        loginServer: pulumi.Input<string>;
        /**
         * The password for logging into the custom Container Registry. It can be either a plain text of password, or a Keyvault Secret ID.
         */
        password?: pulumi.Input<string>;
        /**
         * The username for logging into the custom Container Registry. It can be either a plain text of username, or a Keyvault Secret ID.
         */
        username?: pulumi.Input<string>;
    }
    interface RegistryTaskRegistryCredentialSource {
        /**
         * The login mode for the source registry. Possible values are `None` and `Default`.
         */
        loginMode: pulumi.Input<string>;
    }
    interface RegistryTaskSourceTrigger {
        /**
         * A `authentication` block as defined above.
         */
        authentication?: pulumi.Input<inputs.containerservice.RegistryTaskSourceTriggerAuthentication>;
        /**
         * The branch name of the source code.
         */
        branch?: pulumi.Input<string>;
        /**
         * Should the trigger be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Specifies a list of source events corresponding to the trigger. Possible values are `commit` and `pullrequest`.
         */
        events: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this trigger.
         */
        name: pulumi.Input<string>;
        /**
         * The full URL to the source code repository.
         */
        repositoryUrl: pulumi.Input<string>;
        /**
         * The type of the source control service. Possible values are `Github` and `VisualStudioTeamService`.
         */
        sourceType: pulumi.Input<string>;
    }
    interface RegistryTaskSourceTriggerAuthentication {
        /**
         * Time in seconds that the token remains valid.
         */
        expireInSeconds?: pulumi.Input<number>;
        /**
         * The refresh token used to refresh the access token.
         */
        refreshToken?: pulumi.Input<string>;
        /**
         * The scope of the access token.
         */
        scope?: pulumi.Input<string>;
        /**
         * The access token used to access the source control provider.
         */
        token: pulumi.Input<string>;
        /**
         * The type of the token. Possible values are `PAT` (personal access token) and `OAuth`.
         */
        tokenType: pulumi.Input<string>;
    }
    interface RegistryTaskTimerTrigger {
        /**
         * Should the trigger be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this trigger.
         */
        name: pulumi.Input<string>;
        /**
         * The CRON expression for the task schedule.
         */
        schedule: pulumi.Input<string>;
    }
    interface TokenPasswordPassword1 {
        /**
         * The expiration date of the password in RFC3339 format. If not specified, the password never expires. Changing this forces a new resource to be created.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The value of the password (Sensitive).
         */
        value?: pulumi.Input<string>;
    }
    interface TokenPasswordPassword2 {
        /**
         * The expiration date of the password in RFC3339 format. If not specified, the password never expires. Changing this forces a new resource to be created.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The value of the password (Sensitive).
         */
        value?: pulumi.Input<string>;
    }
}
export declare namespace core {
    interface CustomProviderAction {
        /**
         * Specifies the endpoint of the action.
         */
        endpoint: pulumi.Input<string>;
        /**
         * Specifies the name of the action.
         */
        name: pulumi.Input<string>;
    }
    interface CustomProviderResourceType {
        /**
         * Specifies the endpoint of the route definition.
         */
        endpoint: pulumi.Input<string>;
        /**
         * Specifies the name of the route definition.
         */
        name: pulumi.Input<string>;
        /**
         * The routing type that is supported for the resource request. Valid values are `Proxy` and `Proxy,Cache`. Defaults to `Proxy`.
         */
        routingType?: pulumi.Input<string>;
    }
    interface CustomProviderValidation {
        /**
         * The endpoint where the validation specification is located.
         */
        specification: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptAzureCliContainer {
        /**
         * Container group name, if not specified then the name will get auto-generated. For more information, please refer to the [Container Configuration](https://learn.microsoft.com/en-us/rest/api/resources/deployment-scripts/create?tabs=HTTP#containerconfiguration) documentation.
         */
        containerGroupName?: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptAzureCliEnvironmentVariable {
        /**
         * Specifies the name of the environment variable.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the secure environment variable.
         */
        secureValue?: pulumi.Input<string>;
        /**
         * Specifies the value of the environment variable.
         */
        value?: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptAzureCliIdentity {
        /**
         * Specifies the list of user-assigned managed identity IDs associated with the resource. Changing this forces a new resource to be created.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Type of the managed identity. The only possible value is `UserAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptAzureCliStorageAccount {
        /**
         * Specifies the storage account access key.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies the storage account name.
         */
        name: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptPowerShellContainer {
        /**
         * Container group name, if not specified then the name will get auto-generated. For more information, please refer to the [Container Configuration](https://learn.microsoft.com/en-us/rest/api/resources/deployment-scripts/create?tabs=HTTP#containerconfiguration) documentation.
         */
        containerGroupName?: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptPowerShellEnvironmentVariable {
        /**
         * Specifies the name of the environment variable.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the secure environment variable.
         */
        secureValue?: pulumi.Input<string>;
        /**
         * Specifies the value of the environment variable.
         */
        value?: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptPowerShellIdentity {
        /**
         * Specifies the list of user-assigned managed identity IDs associated with the resource. Changing this forces a new resource to be created.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Type of the managed identity. The only possible value is `UserAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceDeploymentScriptPowerShellStorageAccount {
        /**
         * Specifies the storage account access key.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies the storage account name.
         */
        name: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementExportExportDataOptions {
        /**
         * The time frame for pulling data for the query. If custom, then a specific time period must be provided. Possible values include: `WeekToDate`, `MonthToDate`, `BillingMonthToDate`, `TheLast7Days`, `TheLastMonth`, `TheLastBillingMonth`, `Custom`.
         */
        timeFrame: pulumi.Input<string>;
        /**
         * The type of the query. Possible values are `ActualCost`, `AmortizedCost` and `Usage`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementExportExportDataStorageLocation {
        /**
         * The Resource Manager ID of the container where exports will be uploaded. Changing this forces a new resource to be created.
         */
        containerId: pulumi.Input<string>;
        /**
         * The path of the directory where exports will be uploaded. Changing this forces a new resource to be created.
         *
         * > **Note:** The Resource Manager ID of a Storage Container is exposed via the `resourceManagerId` attribute of the `azure.storage.Container` resource.
         */
        rootFolderPath: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementViewDataset {
        /**
         * One or more `aggregation` blocks as defined above.
         */
        aggregations: pulumi.Input<pulumi.Input<inputs.core.ResourceGroupCostManagementViewDatasetAggregation>[]>;
        /**
         * The granularity of rows in the report. Possible values are `Daily` and `Monthly`.
         */
        granularity: pulumi.Input<string>;
        /**
         * One or more `grouping` blocks as defined below.
         */
        groupings?: pulumi.Input<pulumi.Input<inputs.core.ResourceGroupCostManagementViewDatasetGrouping>[]>;
        /**
         * One or more `sorting` blocks as defined below, containing the order by expression to be used in the report
         */
        sortings?: pulumi.Input<pulumi.Input<inputs.core.ResourceGroupCostManagementViewDatasetSorting>[]>;
    }
    interface ResourceGroupCostManagementViewDatasetAggregation {
        /**
         * The name of the column to aggregate. Changing this forces a new Cost Management View for a Resource Group to be created.
         */
        columnName: pulumi.Input<string>;
        /**
         * The name which should be used for this aggregation. Changing this forces a new Cost Management View for a Resource Group to be created.
         */
        name: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementViewDatasetGrouping {
        /**
         * The name of the column to group.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the column. Possible values are `Dimension` and `TagKey`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementViewDatasetSorting {
        /**
         * Direction of sort. Possible values are `Ascending` and `Descending`.
         */
        direction: pulumi.Input<string>;
        /**
         * The name of the column to sort.
         */
        name: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementViewKpi {
        /**
         * KPI type. Possible values are `Budget` and `Forecast`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceGroupCostManagementViewPivot {
        /**
         * The name of the column which should be used for this sub-view in the Cost Analysis UI.
         */
        name: pulumi.Input<string>;
        /**
         * The data type to show in this sub-view. Possible values are `Dimension` and `TagKey`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceGroupPolicyAssignmentIdentity {
        /**
         * A list of User Managed Identity IDs which should be assigned to the Policy Definition.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the Policy Assignment for this Resource Group.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the Policy Assignment for this Resource Group.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity which should be added to this Policy Definition. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourceGroupPolicyAssignmentNonComplianceMessage {
        /**
         * The non-compliance message text. When assigning policy sets (initiatives), unless `policyDefinitionReferenceId` is specified then this message will be the default for all policies.
         */
        content: pulumi.Input<string>;
        /**
         * When assigning policy sets (initiatives), this is the ID of the policy definition that the non-compliance message applies to.
         */
        policyDefinitionReferenceId?: pulumi.Input<string>;
    }
    interface ResourceGroupPolicyAssignmentOverride {
        /**
         * One or more `overrideSelector` block as defined below.
         */
        selectors?: pulumi.Input<pulumi.Input<inputs.core.ResourceGroupPolicyAssignmentOverrideSelector>[]>;
        /**
         * Specifies the value to override the policy property. Possible values for `policyEffect` override listed [policy effects](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects).
         */
        value: pulumi.Input<string>;
    }
    interface ResourceGroupPolicyAssignmentOverrideSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind?: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ResourceGroupPolicyAssignmentResourceSelector {
        /**
         * Specifies a name for the resource selector.
         */
        name?: pulumi.Input<string>;
        /**
         * One or more `resourceSelector` block as defined below.
         */
        selectors: pulumi.Input<pulumi.Input<inputs.core.ResourceGroupPolicyAssignmentResourceSelectorSelector>[]>;
    }
    interface ResourceGroupPolicyAssignmentResourceSelectorSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ResourcePolicyAssignmentIdentity {
        /**
         * A list of User Managed Identity IDs which should be assigned to the Policy Definition.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the Policy Assignment for this Resource.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the Policy Assignment for this Resource.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity which should be added to this Policy Definition. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ResourcePolicyAssignmentNonComplianceMessage {
        /**
         * The non-compliance message text. When assigning policy sets (initiatives), unless `policyDefinitionReferenceId` is specified then this message will be the default for all policies.
         */
        content: pulumi.Input<string>;
        /**
         * When assigning policy sets (initiatives), this is the ID of the policy definition that the non-compliance message applies to.
         */
        policyDefinitionReferenceId?: pulumi.Input<string>;
    }
    interface ResourcePolicyAssignmentOverride {
        /**
         * One or more `overrideSelector` block as defined below.
         */
        selectors?: pulumi.Input<pulumi.Input<inputs.core.ResourcePolicyAssignmentOverrideSelector>[]>;
        /**
         * Specifies the value to override the policy property. Possible values for `policyEffect` override listed [policy effects](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects).
         */
        value: pulumi.Input<string>;
    }
    interface ResourcePolicyAssignmentOverrideSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind?: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ResourcePolicyAssignmentResourceSelector {
        /**
         * Specifies a name for the resource selector.
         */
        name?: pulumi.Input<string>;
        /**
         * One or more `resourceSelector` block as defined below.
         */
        selectors: pulumi.Input<pulumi.Input<inputs.core.ResourcePolicyAssignmentResourceSelectorSelector>[]>;
    }
    interface ResourcePolicyAssignmentResourceSelectorSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ResourceProviderRegistrationFeature {
        /**
         * Specifies the name of the feature to register.
         *
         * > **Note:** Only Preview Features which have an `ApprovalType` of `AutoApproval` can be managed in Terraform, features which require manual approval by Service Teams are unsupported. [More information on Resource Provider Preview Features can be found in this document](https://docs.microsoft.com/rest/api/resources/features)
         */
        name: pulumi.Input<string>;
        /**
         * Should this feature be Registered or Unregistered?
         */
        registered: pulumi.Input<boolean>;
    }
    interface SubscriptionCostManagementExportExportDataOptions {
        /**
         * The time frame for pulling data for the query. If custom, then a specific time period must be provided. Possible values include: `WeekToDate`, `MonthToDate`, `BillingMonthToDate`, `TheLast7Days`, `TheLastMonth`, `TheLastBillingMonth`, `Custom`.
         */
        timeFrame: pulumi.Input<string>;
        /**
         * The type of the query. Possible values are `ActualCost`, `AmortizedCost` and `Usage`.
         */
        type: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementExportExportDataStorageLocation {
        /**
         * The Resource Manager ID of the container where exports will be uploaded. Changing this forces a new resource to be created.
         */
        containerId: pulumi.Input<string>;
        /**
         * The path of the directory where exports will be uploaded. Changing this forces a new resource to be created.
         *
         * > **Note:** The Resource Manager ID of a Storage Container is exposed via the `resourceManagerId` attribute of the `azure.storage.Container` resource.
         */
        rootFolderPath: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementViewDataset {
        /**
         * One or more `aggregation` blocks as defined above.
         */
        aggregations: pulumi.Input<pulumi.Input<inputs.core.SubscriptionCostManagementViewDatasetAggregation>[]>;
        /**
         * The granularity of rows in the report. Possible values are `Daily` and `Monthly`.
         */
        granularity: pulumi.Input<string>;
        /**
         * One or more `grouping` blocks as defined below.
         */
        groupings?: pulumi.Input<pulumi.Input<inputs.core.SubscriptionCostManagementViewDatasetGrouping>[]>;
        /**
         * One or more `sorting` blocks as defined below, containing the order by expression to be used in the report
         */
        sortings?: pulumi.Input<pulumi.Input<inputs.core.SubscriptionCostManagementViewDatasetSorting>[]>;
    }
    interface SubscriptionCostManagementViewDatasetAggregation {
        /**
         * The name of the column to aggregate. Changing this forces a new Cost Management View for a Subscription to be created.
         */
        columnName: pulumi.Input<string>;
        /**
         * The name which should be used for this aggregation. Changing this forces a new Cost Management View for a Subscription to be created.
         */
        name: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementViewDatasetGrouping {
        /**
         * The name of the column to group.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the column. Possible values are `Dimension` and `TagKey`.
         */
        type: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementViewDatasetSorting {
        /**
         * Direction of sort. Possible values are `Ascending` and `Descending`.
         */
        direction: pulumi.Input<string>;
        /**
         * The name of the column to sort.
         */
        name: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementViewKpi {
        /**
         * KPI type. Possible values are `Budget` and `Forecast`.
         */
        type: pulumi.Input<string>;
    }
    interface SubscriptionCostManagementViewPivot {
        /**
         * The name of the column which should be used for this sub-view in the Cost Analysis UI.
         */
        name: pulumi.Input<string>;
        /**
         * The data type to show in this sub-view. Possible values are `Dimension` and `TagKey`.
         */
        type: pulumi.Input<string>;
    }
    interface SubscriptionPolicyAssignmentIdentity {
        /**
         * A list of User Managed Identity IDs which should be assigned to the Policy Definition.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the Policy Assignment for this Subscription.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the Policy Assignment for this Subscription.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity which should be added to this Policy Definition. Possible values are `SystemAssigned` or `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface SubscriptionPolicyAssignmentNonComplianceMessage {
        /**
         * The non-compliance message text. When assigning policy sets (initiatives), unless `policyDefinitionReferenceId` is specified then this message will be the default for all policies.
         */
        content: pulumi.Input<string>;
        /**
         * When assigning policy sets (initiatives), this is the ID of the policy definition that the non-compliance message applies to.
         */
        policyDefinitionReferenceId?: pulumi.Input<string>;
    }
    interface SubscriptionPolicyAssignmentOverride {
        /**
         * One or more `overrideSelector` block as defined below.
         */
        selectors?: pulumi.Input<pulumi.Input<inputs.core.SubscriptionPolicyAssignmentOverrideSelector>[]>;
        /**
         * Specifies the value to override the policy property. Possible values for `policyEffect` override listed [policy effects](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects).
         */
        value: pulumi.Input<string>;
    }
    interface SubscriptionPolicyAssignmentOverrideSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind?: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SubscriptionPolicyAssignmentResourceSelector {
        /**
         * Specifies a name for the resource selector.
         */
        name?: pulumi.Input<string>;
        /**
         * One or more `resourceSelector` block as defined below.
         */
        selectors: pulumi.Input<pulumi.Input<inputs.core.SubscriptionPolicyAssignmentResourceSelectorSelector>[]>;
    }
    interface SubscriptionPolicyAssignmentResourceSelectorSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace cosmosdb {
    interface AccountAnalyticalStorage {
        /**
         * The schema type of the Analytical Storage for this Cosmos DB account. Possible values are `FullFidelity` and `WellDefined`.
         */
        schemaType: pulumi.Input<string>;
    }
    interface AccountBackup {
        /**
         * The interval in minutes between two backups. Possible values are between 60 and 1440. Defaults to `240`.
         */
        intervalInMinutes?: pulumi.Input<number>;
        /**
         * The time in hours that each backup is retained. Possible values are between 8 and 720. Defaults to `8`.
         */
        retentionInHours?: pulumi.Input<number>;
        /**
         * The storage redundancy is used to indicate the type of backup residency. Possible values are `Geo`, `Local` and `Zone`. Defaults to `Geo`.
         *
         * > **Note:** You can only configure `intervalInMinutes`, `retentionInHours` and `storageRedundancy` when the `type` field is set to `Periodic`.
         */
        storageRedundancy?: pulumi.Input<string>;
        /**
         * The continuous backup tier. Possible values are `Continuous7Days` and `Continuous30Days`.
         */
        tier?: pulumi.Input<string>;
        /**
         * The type of the `backup`. Possible values are `Continuous` and `Periodic`.
         *
         * > **Note:** Migration of `Periodic` to `Continuous` is one-way, changing `Continuous` to `Periodic` forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface AccountCapability {
        /**
         * Specifies the name of the CosmosDB Account. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface AccountCapacity {
        /**
         * The total throughput limit imposed on this Cosmos DB account (RU/s). Possible values are at least `-1`. `-1` means no limit.
         */
        totalThroughputLimit: pulumi.Input<number>;
    }
    interface AccountConsistencyPolicy {
        /**
         * The Consistency Level to use for this CosmosDB Account - can be either `BoundedStaleness`, `Eventual`, `Session`, `Strong` or `ConsistentPrefix`.
         */
        consistencyLevel: pulumi.Input<string>;
        /**
         * When used with the Bounded Staleness consistency level, this value represents the time amount of staleness (in seconds) tolerated. The accepted range for this value is `5` - `86400` (1 day). Defaults to `5`. Required when `consistencyLevel` is set to `BoundedStaleness`.
         */
        maxIntervalInSeconds?: pulumi.Input<number>;
        /**
         * When used with the Bounded Staleness consistency level, this value represents the number of stale requests tolerated. The accepted range for this value is `10` – `2147483647`. Defaults to `100`. Required when `consistencyLevel` is set to `BoundedStaleness`.
         *
         * > **Note:** `maxIntervalInSeconds` and `maxStalenessPrefix` can only be set to values other than default when the `consistencyLevel` is set to `BoundedStaleness`.
         */
        maxStalenessPrefix?: pulumi.Input<number>;
    }
    interface AccountCorsRule {
        /**
         * A list of headers that are allowed to be a part of the cross-origin request.
         */
        allowedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of HTTP headers that are allowed to be executed by the origin. Valid options are `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PUT` or `PATCH`.
         */
        allowedMethods: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of origin domains that will be allowed by CORS.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of response headers that are exposed to CORS clients.
         */
        exposedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of seconds the client should cache a preflight response. Possible values are between `1` and `2147483647`.
         */
        maxAgeInSeconds?: pulumi.Input<number>;
    }
    interface AccountGeoLocation {
        /**
         * The failover priority of the region. A failover priority of `0` indicates a write region. The maximum value for a failover priority = (total number of regions - 1). Failover priority values must be unique for each of the regions in which the database account exists. Changing this causes the location to be re-provisioned and cannot be changed for the location with failover priority `0`.
         */
        failoverPriority: pulumi.Input<number>;
        /**
         * The CosmosDB Account ID.
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Azure region to host replicated data.
         */
        location: pulumi.Input<string>;
        /**
         * Should zone redundancy be enabled for this region? Defaults to `false`.
         */
        zoneRedundant?: pulumi.Input<boolean>;
    }
    interface AccountIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Cosmos Account.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity assigned to this Cosmos account. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface AccountRestore {
        /**
         * A `database` block as defined below. Changing this forces a new resource to be created.
         */
        databases?: pulumi.Input<pulumi.Input<inputs.cosmosdb.AccountRestoreDatabase>[]>;
        /**
         * One or more `gremlinDatabase` blocks as defined below. Changing this forces a new resource to be created.
         */
        gremlinDatabases?: pulumi.Input<pulumi.Input<inputs.cosmosdb.AccountRestoreGremlinDatabase>[]>;
        /**
         * The creation time of the database or the collection (Datetime Format `RFC 3339`). Changing this forces a new resource to be created.
         */
        restoreTimestampInUtc: pulumi.Input<string>;
        /**
         * The resource ID of the restorable database account from which the restore has to be initiated. The example is `/subscriptions/{subscriptionId}/providers/Microsoft.DocumentDB/locations/{location}/restorableDatabaseAccounts/{restorableDatabaseAccountName}`. Changing this forces a new resource to be created.
         *
         * > **Note:** Any database account with `Continuous` type (live account or accounts deleted in last 30 days) is a restorable database account and there cannot be Create/Update/Delete operations on the restorable database accounts. They can only be read and retrieved by `azure.cosmosdb.getRestorableDatabaseAccounts`.
         */
        sourceCosmosdbAccountId: pulumi.Input<string>;
        /**
         * A list of specific tables available for restore. Changing this forces a new resource to be created.
         */
        tablesToRestores?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AccountRestoreDatabase {
        /**
         * A list of the collection names for the restore request. Changing this forces a new resource to be created.
         */
        collectionNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The database name for the restore request. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface AccountRestoreGremlinDatabase {
        /**
         * A list of the Graph names for the restore request. Changing this forces a new resource to be created.
         */
        graphNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Gremlin Database name for the restore request. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface AccountVirtualNetworkRule {
        /**
         * The ID of the virtual network subnet.
         */
        id: pulumi.Input<string>;
        /**
         * If set to true, the specified subnet will be added as a virtual network rule even if its CosmosDB service endpoint is not active. Defaults to `false`.
         */
        ignoreMissingVnetServiceEndpoint?: pulumi.Input<boolean>;
    }
    interface CassandraClusterIdentity {
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Cassandra Cluster. The only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface CassandraKeyspaceAutoscaleSettings {
        /**
         * The maximum throughput of the Cassandra KeySpace (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface CassandraTableAutoscaleSettings {
        /**
         * The maximum throughput of the Cassandra Table (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface CassandraTableSchema {
        /**
         * One or more `clusterKey` blocks as defined below.
         */
        clusterKeys?: pulumi.Input<pulumi.Input<inputs.cosmosdb.CassandraTableSchemaClusterKey>[]>;
        /**
         * One or more `column` blocks as defined below.
         */
        columns: pulumi.Input<pulumi.Input<inputs.cosmosdb.CassandraTableSchemaColumn>[]>;
        /**
         * One or more `partitionKey` blocks as defined below.
         */
        partitionKeys: pulumi.Input<pulumi.Input<inputs.cosmosdb.CassandraTableSchemaPartitionKey>[]>;
    }
    interface CassandraTableSchemaClusterKey {
        /**
         * Name of the cluster key to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Order of the key. Currently supported values are `Asc` and `Desc`.
         */
        orderBy: pulumi.Input<string>;
    }
    interface CassandraTableSchemaColumn {
        /**
         * Name of the column to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column to be created.
         */
        type: pulumi.Input<string>;
    }
    interface CassandraTableSchemaPartitionKey {
        /**
         * Name of the column to partition by.
         */
        name: pulumi.Input<string>;
    }
    interface GremlinDatabaseAutoscaleSettings {
        /**
         * The maximum throughput of the Gremlin database (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface GremlinGraphAutoscaleSettings {
        /**
         * The maximum throughput of the Gremlin graph (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface GremlinGraphConflictResolutionPolicy {
        /**
         * The conflict resolution path in the case of LastWriterWins mode.
         */
        conflictResolutionPath?: pulumi.Input<string>;
        /**
         * The procedure to resolve conflicts in the case of custom mode.
         */
        conflictResolutionProcedure?: pulumi.Input<string>;
        /**
         * Indicates the conflict resolution mode. Possible values include: `LastWriterWins`, `Custom`.
         */
        mode: pulumi.Input<string>;
    }
    interface GremlinGraphIndexPolicy {
        /**
         * Indicates if the indexing policy is automatic. Defaults to `true`.
         */
        automatic?: pulumi.Input<boolean>;
        /**
         * One or more `compositeIndex` blocks as defined below.
         */
        compositeIndices?: pulumi.Input<pulumi.Input<inputs.cosmosdb.GremlinGraphIndexPolicyCompositeIndex>[]>;
        /**
         * List of paths to exclude from indexing. Required if `indexingMode` is `Consistent` or `Lazy`.
         */
        excludedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of paths to include in the indexing. Required if `indexingMode` is `Consistent` or `Lazy`.
         */
        includedPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Indicates the indexing mode. Possible values include: `Consistent`, `Lazy`, `None`.
         */
        indexingMode: pulumi.Input<string>;
        /**
         * One or more `spatialIndex` blocks as defined below.
         */
        spatialIndices?: pulumi.Input<pulumi.Input<inputs.cosmosdb.GremlinGraphIndexPolicySpatialIndex>[]>;
    }
    interface GremlinGraphIndexPolicyCompositeIndex {
        /**
         * One or more `index` blocks as defined below.
         */
        indices: pulumi.Input<pulumi.Input<inputs.cosmosdb.GremlinGraphIndexPolicyCompositeIndexIndex>[]>;
    }
    interface GremlinGraphIndexPolicyCompositeIndexIndex {
        /**
         * Order of the index. Possible values are `Ascending` or `Descending`.
         */
        order: pulumi.Input<string>;
        /**
         * Path for which the indexing behaviour applies to.
         */
        path: pulumi.Input<string>;
    }
    interface GremlinGraphIndexPolicySpatialIndex {
        /**
         * Path for which the indexing behaviour applies to. According to the service design, all spatial types including `LineString`, `MultiPolygon`, `Point`, and `Polygon` will be applied to the path.
         */
        path: pulumi.Input<string>;
        types?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface GremlinGraphUniqueKey {
        /**
         * A list of paths to use for this unique key. Changing this forces a new resource to be created.
         */
        paths: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface MongoClusterConnectionString {
        /**
         * The description of the connection string.
         */
        description?: pulumi.Input<string>;
        /**
         * The name which should be used for the MongoDB Cluster. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The value of the Mongo Cluster connection string. The `<user>:<password>` placeholder returned from API will be replaced by the real `administratorUsername` and `administratorPassword` if available in the state.
         */
        value?: pulumi.Input<string>;
    }
    interface MongoClusterCustomerManagedKey {
        /**
         * The ID of the key vault key used for encryption. For example: `https://example-vault-name.vault.azure.net/keys/example-key-name`.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity that has access to the Key Vault Key.
         */
        userAssignedIdentityId: pulumi.Input<string>;
    }
    interface MongoClusterIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign.
         *
         * > **Note:** Required when `type` is set to `UserAssigned`.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of managed identity to assign. Possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface MongoClusterRestore {
        /**
         * The point in time (in UTC) to restore from, in ISO 8601 format (e.g., `2024-01-01T00:00:00Z`). Changing this forces a new resource to be created.
         */
        pointInTimeUtc: pulumi.Input<string>;
        /**
         * The ID of the source MongoDB Cluster to restore from. Changing this forces a new resource to be created.
         */
        sourceId: pulumi.Input<string>;
    }
    interface MongoCollectionAutoscaleSettings {
        /**
         * The maximum throughput of the MongoDB collection (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface MongoCollectionIndex {
        /**
         * Specifies the list of user settable keys for each Cosmos DB Mongo Collection.
         */
        keys: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is the index unique or not? Defaults to `false`.
         *
         * > **Note:** An index with an "_id" key must be specified.
         */
        unique?: pulumi.Input<boolean>;
    }
    interface MongoCollectionSystemIndex {
        /**
         * The list of system keys which are not settable for each Cosmos DB Mongo Collection.
         */
        keys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Identifies whether the table contains no duplicate values.
         */
        unique?: pulumi.Input<boolean>;
    }
    interface MongoDatabaseAutoscaleSettings {
        /**
         * The maximum throughput of the MongoDB database (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface MongoRoleDefinitionPrivilege {
        /**
         * A list of actions that are allowed.
         */
        actions: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `resource` block as defined below.
         */
        resource: pulumi.Input<inputs.cosmosdb.MongoRoleDefinitionPrivilegeResource>;
    }
    interface MongoRoleDefinitionPrivilegeResource {
        /**
         * The name of the Mongo DB Collection that the Role Definition is applied.
         */
        collectionName?: pulumi.Input<string>;
        /**
         * The name of the Mongo DB that the Role Definition is applied.
         */
        dbName?: pulumi.Input<string>;
    }
    interface PostgresqlClusterMaintenanceWindow {
        /**
         * The day of week for maintenance window, where the week starts on a Sunday, i.e. Sunday = `0`, Monday = `1`. Defaults to `0`.
         */
        dayOfWeek?: pulumi.Input<number>;
        /**
         * The start hour for maintenance window. Defaults to `0`.
         */
        startHour?: pulumi.Input<number>;
        /**
         * The start minute for maintenance window. Defaults to `0`.
         */
        startMinute?: pulumi.Input<number>;
    }
    interface PostgresqlClusterServer {
        /**
         * The Fully Qualified Domain Name of the server.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * The name which should be used for this Azure Cosmos DB for PostgreSQL Cluster. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface SqlContainerAutoscaleSettings {
        /**
         * The maximum throughput of the SQL container (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface SqlContainerConflictResolutionPolicy {
        /**
         * The conflict resolution path in the case of `LastWriterWins` mode.
         */
        conflictResolutionPath?: pulumi.Input<string>;
        /**
         * The procedure to resolve conflicts in the case of `Custom` mode.
         */
        conflictResolutionProcedure?: pulumi.Input<string>;
        /**
         * Indicates the conflict resolution mode. Possible values include: `LastWriterWins`, `Custom`.
         */
        mode: pulumi.Input<string>;
    }
    interface SqlContainerIndexingPolicy {
        /**
         * One or more `compositeIndex` blocks as defined below.
         */
        compositeIndices?: pulumi.Input<pulumi.Input<inputs.cosmosdb.SqlContainerIndexingPolicyCompositeIndex>[]>;
        /**
         * One or more `excludedPath` blocks as defined below. Either `includedPath` or `excludedPath` must contain the `path` `/*`
         */
        excludedPaths?: pulumi.Input<pulumi.Input<inputs.cosmosdb.SqlContainerIndexingPolicyExcludedPath>[]>;
        /**
         * One or more `includedPath` blocks as defined below. Either `includedPath` or `excludedPath` must contain the `path` `/*`
         */
        includedPaths?: pulumi.Input<pulumi.Input<inputs.cosmosdb.SqlContainerIndexingPolicyIncludedPath>[]>;
        /**
         * Indicates the indexing mode. Possible values include: `consistent` and `none`. Defaults to `consistent`.
         */
        indexingMode?: pulumi.Input<string>;
        /**
         * One or more `spatialIndex` blocks as defined below.
         */
        spatialIndices?: pulumi.Input<pulumi.Input<inputs.cosmosdb.SqlContainerIndexingPolicySpatialIndex>[]>;
    }
    interface SqlContainerIndexingPolicyCompositeIndex {
        /**
         * One or more `index` blocks as defined below.
         */
        indices: pulumi.Input<pulumi.Input<inputs.cosmosdb.SqlContainerIndexingPolicyCompositeIndexIndex>[]>;
    }
    interface SqlContainerIndexingPolicyCompositeIndexIndex {
        /**
         * Order of the index. Possible values are `Ascending` or `Descending`.
         */
        order: pulumi.Input<string>;
        /**
         * Path for which the indexing behaviour applies to.
         */
        path: pulumi.Input<string>;
    }
    interface SqlContainerIndexingPolicyExcludedPath {
        /**
         * Path that is excluded from indexing.
         */
        path: pulumi.Input<string>;
    }
    interface SqlContainerIndexingPolicyIncludedPath {
        /**
         * Path for which the indexing behaviour applies to.
         */
        path: pulumi.Input<string>;
    }
    interface SqlContainerIndexingPolicySpatialIndex {
        /**
         * Path for which the indexing behaviour applies to. According to the service design, all spatial types including `LineString`, `MultiPolygon`, `Point`, and `Polygon` will be applied to the path.
         */
        path: pulumi.Input<string>;
        /**
         * A set of spatial types of the path.
         */
        types?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SqlContainerUniqueKey {
        /**
         * A list of paths to use for this unique key. Changing this forces a new resource to be created.
         */
        paths: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SqlDatabaseAutoscaleSettings {
        /**
         * The maximum throughput of the SQL database (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
    interface SqlRoleDefinitionPermission {
        /**
         * A list of data actions that are allowed for the Cosmos DB SQL Role Definition.
         */
        dataActions: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface TableAutoscaleSettings {
        /**
         * The maximum throughput of the Table (RU/s). Must be between `1,000` and `1,000,000`. Must be set in increments of `1,000`. Conflicts with `throughput`.
         */
        maxThroughput?: pulumi.Input<number>;
    }
}
export declare namespace dashboard {
    interface GetGrafanaIdentity {
        identityIds?: string[];
        principalId?: string;
        tenantId?: string;
        type: string;
    }
    interface GetGrafanaIdentityArgs {
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        type: pulumi.Input<string>;
    }
    interface GrafanaAzureMonitorWorkspaceIntegration {
        /**
         * Specifies the resource ID of the connected Azure Monitor Workspace.
         */
        resourceId: pulumi.Input<string>;
    }
    interface GrafanaIdentity {
        /**
         * Specifies the list of User Assigned Managed Service Identity IDs which should be assigned to this Dashboard Grafana. Changing this forces a new resource to be created.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity. Possible values are `SystemAssigned`, `UserAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface GrafanaSmtp {
        /**
         * Whether to enable the smtp setting of the Grafana instance. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Address used when sending emails.
         */
        fromAddress: pulumi.Input<string>;
        /**
         * Name used when sending emails. Defaults to `Azure Managed Grafana Notification`.
         */
        fromName?: pulumi.Input<string>;
        /**
         * SMTP server hostname with port, e.g. test.email.net:587
         */
        host: pulumi.Input<string>;
        /**
         * Password of SMTP authentication.
         */
        password: pulumi.Input<string>;
        /**
         * Whether to use TLS when connecting to SMTP server. Possible values are `OpportunisticStartTLS`, `NoStartTLS`, `MandatoryStartTLS`.
         */
        startTlsPolicy: pulumi.Input<string>;
        /**
         * User of SMTP authentication.
         */
        user: pulumi.Input<string>;
        /**
         * Whether verify SSL for SMTP server. Defaults to `false`.
         */
        verificationSkipEnabled?: pulumi.Input<boolean>;
    }
}
export declare namespace databoxedge {
    interface DeviceDeviceProperty {
        /**
         * The Data Box Edge/Gateway device local capacity in MB.
         */
        capacity?: pulumi.Input<number>;
        /**
         * Type of compute roles configured.
         */
        configuredRoleTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Data Box Edge/Gateway device culture.
         */
        culture?: pulumi.Input<string>;
        /**
         * The device software version number of the device (e.g. 1.2.18105.6).
         */
        hcsVersion?: pulumi.Input<string>;
        /**
         * The Data Box Edge/Gateway device model.
         */
        model?: pulumi.Input<string>;
        /**
         * The number of nodes in the cluster.
         */
        nodeCount?: pulumi.Input<number>;
        /**
         * The Serial Number of Data Box Edge/Gateway device.
         */
        serialNumber?: pulumi.Input<string>;
        /**
         * The Data Box Edge/Gateway device software version.
         */
        softwareVersion?: pulumi.Input<string>;
        /**
         * The status of the Data Box Edge/Gateway device.
         */
        status?: pulumi.Input<string>;
        /**
         * The Data Box Edge/Gateway device timezone.
         */
        timeZone?: pulumi.Input<string>;
        /**
         * The type of the Data Box Edge/Gateway device.
         */
        type?: pulumi.Input<string>;
    }
}
export declare namespace databricks {
    interface AccessConnectorIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to the Databricks Access Connector. Only one User Assigned Managed Identity ID is supported per Databricks Access Connector resource.
         *
         * > **Note:** `identityIds` are required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the System Assigned Managed Service Identity that is configured on this Access Connector.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the System Assigned Managed Service Identity that is configured on this Access Connector.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on the Databricks Access Connector. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceCustomParameters {
        /**
         * The ID of a Azure Machine Learning workspace to link with Databricks workspace. Changing this forces a new resource to be created.
         */
        machineLearningWorkspaceId?: pulumi.Input<string>;
        /**
         * Name of the NAT gateway for Secure Cluster Connectivity (No Public IP) workspace subnets (only for workspace with managed virtual network). Defaults to `nat-gateway`. Changing this forces a new resource to be created.
         */
        natGatewayName?: pulumi.Input<string>;
        /**
         * Are public IP Addresses not allowed? Possible values are `true` or `false`. Defaults to `true`.
         *
         * > **Note:** Updating `noPublicIp` parameter is only allowed if the value is changing from `false` to `true` and only for VNet-injected workspaces.
         *
         * > **Note:** In `v3.104.0` and higher of the provider the `noPublicIp` parameter will now default to `true` instead of `false`.
         */
        noPublicIp?: pulumi.Input<boolean>;
        /**
         * The name of the Private Subnet within the Virtual Network. Required if `virtualNetworkId` is set. Changing this forces a new resource to be created.
         */
        privateSubnetName?: pulumi.Input<string>;
        /**
         * The resource ID of the `azure.network.SubnetNetworkSecurityGroupAssociation` resource which is referred to by the `privateSubnetName` field. This is the same as the ID of the subnet referred to by the `privateSubnetName` field. Required if `virtualNetworkId` is set.
         */
        privateSubnetNetworkSecurityGroupAssociationId?: pulumi.Input<string>;
        /**
         * Name of the Public IP for No Public IP workspace with managed virtual network. Defaults to `nat-gw-public-ip`. Changing this forces a new resource to be created.
         */
        publicIpName?: pulumi.Input<string>;
        /**
         * The name of the Public Subnet within the Virtual Network. Required if `virtualNetworkId` is set. Changing this forces a new resource to be created.
         */
        publicSubnetName?: pulumi.Input<string>;
        /**
         * The resource ID of the `azure.network.SubnetNetworkSecurityGroupAssociation` resource which is referred to by the `publicSubnetName` field. This is the same as the ID of the subnet referred to by the `publicSubnetName` field. Required if `virtualNetworkId` is set.
         */
        publicSubnetNetworkSecurityGroupAssociationId?: pulumi.Input<string>;
        /**
         * Default Databricks File Storage account name. Defaults to a randomized name(e.g. `dbstoragel6mfeghoe5kxu`). Changing this forces a new resource to be created.
         */
        storageAccountName?: pulumi.Input<string>;
        /**
         * Storage account SKU name. Possible values include `Standard_LRS`, `Standard_GRS`, `Standard_RAGRS`, `Standard_GZRS`, `Standard_RAGZRS`, `Standard_ZRS`, `Premium_LRS` or `Premium_ZRS`. Defaults to `Standard_GRS`.
         */
        storageAccountSkuName?: pulumi.Input<string>;
        /**
         * The ID of a Virtual Network where this Databricks Cluster should be created. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * Address prefix for Managed virtual network. Defaults to `10.139`. Changing this forces a new resource to be created.
         *
         * > **Note:** Databricks requires that a network security group is associated with the `public` and `private` subnets when a `virtualNetworkId` has been defined. Both `public` and `private` subnets must be delegated to `Microsoft.Databricks/workspaces`. For more information about subnet delegation see the [product documentation](https://docs.microsoft.com/azure/virtual-network/subnet-delegation-overview).
         */
        vnetAddressPrefix?: pulumi.Input<string>;
    }
    interface WorkspaceEnhancedSecurityCompliance {
        /**
         * Enables automatic cluster updates for this workspace. Defaults to `false`.
         */
        automaticClusterUpdateEnabled?: pulumi.Input<boolean>;
        /**
         * Enables compliance security profile for this workspace. Defaults to `false`.
         *
         * > **Note:** Changing the value of `complianceSecurityProfileEnabled` from `true` to `false` forces a replacement of the Databricks workspace.
         *
         * > **Note:** The attributes `automaticClusterUpdateEnabled` and `enhancedSecurityMonitoringEnabled` must be set to `true` in order to set `complianceSecurityProfileEnabled` to `true`.
         */
        complianceSecurityProfileEnabled?: pulumi.Input<boolean>;
        /**
         * A list of standards to enforce on this workspace. Possible values include `HIPAA` and `PCI_DSS`.
         *
         * > **Note:** `complianceSecurityProfileEnabled` must be set to `true` in order to use `complianceSecurityProfileStandards`.
         *
         * > **Note:** Removing a standard from the `complianceSecurityProfileStandards` list forces a replacement of the Databricks workspace.
         */
        complianceSecurityProfileStandards?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Enables enhanced security monitoring for this workspace. Defaults to `false`.
         */
        enhancedSecurityMonitoringEnabled?: pulumi.Input<boolean>;
    }
    interface WorkspaceManagedDiskIdentity {
        /**
         * The principal UUID for the internal databricks storage account needed to provide access to the workspace for enabling Customer Managed Keys.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The UUID of the tenant where the internal databricks storage account was created.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of the internal databricks storage account.
         */
        type?: pulumi.Input<string>;
    }
    interface WorkspaceStorageAccountIdentity {
        /**
         * The principal UUID for the internal databricks storage account needed to provide access to the workspace for enabling Customer Managed Keys.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The UUID of the tenant where the internal databricks storage account was created.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of the internal databricks storage account.
         */
        type?: pulumi.Input<string>;
    }
}
export declare namespace datadog {
    interface MonitorDatadogOrganization {
        /**
         * Api key associated to the Datadog organization. Changing this forces a new Datadog Monitor to be created.
         */
        apiKey: pulumi.Input<string>;
        /**
         * Application key associated to the Datadog organization. Changing this forces a new Datadog Monitor to be created.
         */
        applicationKey: pulumi.Input<string>;
        /**
         * The ID of the enterprise_app. Changing this forces a new resource to be created.
         */
        enterpriseAppId?: pulumi.Input<string>;
        /**
         * The ID of the Datadog Monitor.
         */
        id?: pulumi.Input<string>;
        /**
         * The auth code used to linking to an existing Datadog organization. Changing this forces a new Datadog Monitor to be created.
         */
        linkingAuthCode?: pulumi.Input<string>;
        /**
         * The ID of the linking_client. Changing this forces a new Datadog Monitor to be created.
         */
        linkingClientId?: pulumi.Input<string>;
        /**
         * The name of the user that will be associated with the Datadog Monitor. Changing this forces a new Datadog Monitor to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The redirect uri for linking. Changing this forces a new Datadog Monitor to be created.
         */
        redirectUri?: pulumi.Input<string>;
    }
    interface MonitorIdentity {
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Datadog Monitor.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Datadog Monitor.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Datadog Monitor. At this time the only allowed value is `SystemAssigned`.
         *
         * > **Note:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and the Datadog Monitor has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface MonitorTagRuleLog {
        /**
         * Whether AAD logs should be sent for the Monitor resource?
         */
        aadLogEnabled?: pulumi.Input<boolean>;
        /**
         * A `filter` block as defined below.
         *
         * > **Note:** List of filtering tags to be used for capturing logs. This only takes effect if `resourceLogEnabled` flag is enabled. If empty, all resources will be captured. If only Exclude action is specified, the rules will apply to the list of all available resources. If Include actions are specified, the rules will only include resources with the associated tags.
         */
        filters?: pulumi.Input<pulumi.Input<inputs.datadog.MonitorTagRuleLogFilter>[]>;
        /**
         * Whether Azure resource logs should be sent for the Monitor resource?
         */
        resourceLogEnabled?: pulumi.Input<boolean>;
        /**
         * Whether Azure subscription logs should be sent for the Monitor resource?
         */
        subscriptionLogEnabled?: pulumi.Input<boolean>;
    }
    interface MonitorTagRuleLogFilter {
        /**
         * Allowed values Include or Exclude.
         */
        action: pulumi.Input<string>;
        /**
         * Name of the Tag.
         */
        name: pulumi.Input<string>;
        /**
         * Value of the Tag.
         */
        value: pulumi.Input<string>;
    }
    interface MonitorTagRuleMetric {
        /**
         * A `filter` block as defined below.
         *
         * > **Note:** List of filtering tags to be used for capturing metrics. If empty, all resources will be captured. If only Exclude action is specified, the rules will apply to the list of all available resources. If Include actions are specified, the rules will only include resources with the associated tags.
         */
        filters?: pulumi.Input<pulumi.Input<inputs.datadog.MonitorTagRuleMetricFilter>[]>;
    }
    interface MonitorTagRuleMetricFilter {
        /**
         * Allowed values Include or Exclude.
         */
        action: pulumi.Input<string>;
        /**
         * Name of the Tag.
         */
        name: pulumi.Input<string>;
        /**
         * Value of the Tag.
         */
        value: pulumi.Input<string>;
    }
    interface MonitorUser {
        /**
         * Email of the user used by Datadog for contacting them if needed. Changing this forces a new Datadog Monitor to be created.
         */
        email: pulumi.Input<string>;
        /**
         * The name which should be used for this user_info. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Phone number of the user used by Datadog for contacting them if needed. Changing this forces a new resource to be created.
         */
        phoneNumber?: pulumi.Input<string>;
    }
}
export declare namespace datafactory {
    interface CredentialServicePrincipalServicePrincipalKey {
        /**
         * The name of the Linked Service to use for the Service Principal Key.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * The name of the Secret in the Key Vault.
         */
        secretName: pulumi.Input<string>;
        /**
         * The version of the Secret in the Key Vault.
         */
        secretVersion?: pulumi.Input<string>;
    }
    interface CustomDatasetLinkedService {
        /**
         * The name of the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSink {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.DataFlowSinkDataset>;
        /**
         * The description for the Data Flow Source.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.DataFlowSinkFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.DataFlowSinkLinkedService>;
        /**
         * The name for the Data Flow Source.
         */
        name: pulumi.Input<string>;
        /**
         * A `rejectedLinkedService` block as defined below.
         */
        rejectedLinkedService?: pulumi.Input<inputs.datafactory.DataFlowSinkRejectedLinkedService>;
        /**
         * A `schemaLinkedService` block as defined below.
         */
        schemaLinkedService?: pulumi.Input<inputs.datafactory.DataFlowSinkSchemaLinkedService>;
    }
    interface DataFlowSinkDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSinkFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSinkLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSinkRejectedLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSinkSchemaLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSource {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.DataFlowSourceDataset>;
        /**
         * The description for the Data Flow Source.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.DataFlowSourceFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.DataFlowSourceLinkedService>;
        /**
         * The name for the Data Flow Source.
         */
        name: pulumi.Input<string>;
        /**
         * A `rejectedLinkedService` block as defined below.
         */
        rejectedLinkedService?: pulumi.Input<inputs.datafactory.DataFlowSourceRejectedLinkedService>;
        /**
         * A `schemaLinkedService` block as defined below.
         */
        schemaLinkedService?: pulumi.Input<inputs.datafactory.DataFlowSourceSchemaLinkedService>;
    }
    interface DataFlowSourceDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSourceFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSourceLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSourceRejectedLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowSourceSchemaLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowTransformation {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.DataFlowTransformationDataset>;
        /**
         * The description for the Data Flow transformation.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.DataFlowTransformationFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.DataFlowTransformationLinkedService>;
        /**
         * The name for the Data Flow transformation.
         */
        name: pulumi.Input<string>;
    }
    interface DataFlowTransformationDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowTransformationFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DataFlowTransformationLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface DatasetAzureBlobSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetAzureSqlTableSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetBinaryAzureBlobStorageLocation {
        /**
         * The container on the Azure Blob Storage Account hosting the file.
         */
        container: pulumi.Input<string>;
        /**
         * Is the `container` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicContainerEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file in the blob container.
         */
        filename?: pulumi.Input<string>;
        /**
         * The folder path to the file in the blob container.
         */
        path?: pulumi.Input<string>;
    }
    interface DatasetBinaryCompression {
        /**
         * The level of compression. Possible values are `Fastest` and `Optimal`.
         */
        level?: pulumi.Input<string>;
        /**
         * The type of compression used during transport. Possible values are `BZip2`, `Deflate`, `GZip`, `Tar`, `TarGZip` and `ZipDeflate`.
         */
        type: pulumi.Input<string>;
    }
    interface DatasetBinaryHttpServerLocation {
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the web server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the web server.
         */
        path: pulumi.Input<string>;
        /**
         * The base URL to the web server hosting the file.
         */
        relativeUrl: pulumi.Input<string>;
    }
    interface DatasetBinarySftpServerLocation {
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the SFTP server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the SFTP server.
         */
        path: pulumi.Input<string>;
    }
    interface DatasetCosmosDBApiSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetDelimitedTextAzureBlobFsLocation {
        /**
         * Is the `fileSystem` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFileSystemEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The storage data lake gen2 file system on the Azure Blob Storage Account hosting the file.
         */
        fileSystem?: pulumi.Input<string>;
        /**
         * The filename of the file.
         */
        filename?: pulumi.Input<string>;
        /**
         * The folder path to the file.
         */
        path?: pulumi.Input<string>;
    }
    interface DatasetDelimitedTextAzureBlobStorageLocation {
        /**
         * The container on the Azure Blob Storage Account hosting the file.
         */
        container: pulumi.Input<string>;
        /**
         * Is the `container` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicContainerEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file.
         */
        filename?: pulumi.Input<string>;
        /**
         * The folder path to the file. This can be an empty string.
         */
        path?: pulumi.Input<string>;
    }
    interface DatasetDelimitedTextHttpServerLocation {
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the web server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the web server.
         */
        path: pulumi.Input<string>;
        /**
         * The base URL to the web server hosting the file.
         */
        relativeUrl: pulumi.Input<string>;
    }
    interface DatasetDelimitedTextSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetHttpSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetJsonAzureBlobStorageLocation {
        /**
         * The container on the Azure Blob Storage Account hosting the file.
         */
        container: pulumi.Input<string>;
        /**
         * Is the `container` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicContainerEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the web server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the web server.
         */
        path: pulumi.Input<string>;
    }
    interface DatasetJsonHttpServerLocation {
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the web server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the web server.
         */
        path: pulumi.Input<string>;
        /**
         * The base URL to the web server hosting the file.
         */
        relativeUrl: pulumi.Input<string>;
    }
    interface DatasetJsonSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetMysqlSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetParquetAzureBlobFsLocation {
        /**
         * Is the `fileSystem` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFileSystemEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The container on the Azure Data Lake Storage Account hosting the file.
         */
        fileSystem?: pulumi.Input<string>;
        /**
         * The filename of the file on the Azure Data Lake Storage Account.
         */
        filename?: pulumi.Input<string>;
        /**
         * The folder path to the file on the Azure Data Lake Storage Account.
         */
        path?: pulumi.Input<string>;
    }
    interface DatasetParquetAzureBlobStorageLocation {
        /**
         * The container on the Azure Blob Storage Account hosting the file.
         */
        container: pulumi.Input<string>;
        /**
         * Is the `container` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicContainerEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the Azure Blob Storage Account.
         */
        filename?: pulumi.Input<string>;
        /**
         * The folder path to the file on the Azure Blob Storage Account.
         */
        path?: pulumi.Input<string>;
    }
    interface DatasetParquetHttpServerLocation {
        /**
         * Is the `filename` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicFilenameEnabled?: pulumi.Input<boolean>;
        /**
         * Is the `path` using dynamic expression, function or system variables? Defaults to `false`.
         */
        dynamicPathEnabled?: pulumi.Input<boolean>;
        /**
         * The filename of the file on the web server.
         */
        filename: pulumi.Input<string>;
        /**
         * The folder path to the file on the web server.
         */
        path?: pulumi.Input<string>;
        /**
         * The base URL to the web server hosting the file.
         */
        relativeUrl: pulumi.Input<string>;
    }
    interface DatasetParquetSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetPostgresqlSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetSnowflakeSchemaColumn {
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * The total number of digits allowed.
         */
        precision?: pulumi.Input<number>;
        /**
         * The number of digits allowed to the right of the decimal point.
         */
        scale?: pulumi.Input<number>;
        /**
         * Type of the column. Valid values are `NUMBER`, `DECIMAL`, `NUMERIC`, `INT`, `INTEGER`, `BIGINT`, `SMALLINT`, `FLOAT``FLOAT4`, `FLOAT8`, `DOUBLE`, `DOUBLE PRECISION`, `REAL`, `VARCHAR`, `CHAR`, `CHARACTER`, `STRING`, `TEXT`, `BINARY`, `VARBINARY`, `BOOLEAN`, `DATE`, `DATETIME`, `TIME`, `TIMESTAMP`, `TIMESTAMP_LTZ`, `TIMESTAMP_NTZ`, `TIMESTAMP_TZ`, `VARIANT`, `OBJECT`, `ARRAY`, `GEOGRAPHY`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface DatasetSqlServerTableSchemaColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * Type of the column. Valid values are `Byte`, `Byte[]`, `Boolean`, `Date`, `DateTime`,`DateTimeOffset`, `Decimal`, `Double`, `Guid`, `Int16`, `Int32`, `Int64`, `Single`, `String`, `TimeSpan`. Please note these values are case sensitive.
         */
        type?: pulumi.Input<string>;
    }
    interface FactoryGithubConfiguration {
        /**
         * Specifies the GitHub account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * Specifies the branch of the repository to get code from.
         */
        branchName: pulumi.Input<string>;
        /**
         * Specifies the GitHub Enterprise host name. For example: <https://github.mydomain.com>. Use <https://github.com> for open source repositories.
         */
        gitUrl?: pulumi.Input<string>;
        /**
         * Is automated publishing enabled? Defaults to `true`.
         *
         * > **Note:** You must log in to the Data Factory management UI to complete the authentication to the GitHub repository.
         */
        publishingEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the git repository.
         */
        repositoryName: pulumi.Input<string>;
        /**
         * Specifies the root folder within the repository. Set to `/` for the top level.
         */
        rootFolder: pulumi.Input<string>;
    }
    interface FactoryGlobalParameter {
        /**
         * Specifies the global parameter name.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the global parameter type. Possible Values are `Array`, `Bool`, `Float`, `Int`, `Object` or `String`.
         */
        type: pulumi.Input<string>;
        /**
         * Specifies the global parameter value.
         *
         * > **Note:** For type `Array` and `Object` it is recommended to use `jsonencode()` for the value
         */
        value: pulumi.Input<string>;
    }
    interface FactoryIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Data Factory.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Data Factory. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface FactoryVstsConfiguration {
        /**
         * Specifies the VSTS account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * Specifies the branch of the repository to get code from.
         */
        branchName: pulumi.Input<string>;
        /**
         * Specifies the name of the VSTS project.
         */
        projectName: pulumi.Input<string>;
        /**
         * Is automated publishing enabled? Defaults to `true`.
         */
        publishingEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the name of the git repository.
         */
        repositoryName: pulumi.Input<string>;
        /**
         * Specifies the root folder within the repository. Set to `/` for the top level.
         */
        rootFolder: pulumi.Input<string>;
        /**
         * Specifies the Tenant ID associated with the VSTS account.
         */
        tenantId: pulumi.Input<string>;
    }
    interface FlowletDataFlowSink {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.FlowletDataFlowSinkDataset>;
        /**
         * The description for the Data Flow Source.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.FlowletDataFlowSinkFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSinkLinkedService>;
        /**
         * The name for the Data Flow Source.
         */
        name: pulumi.Input<string>;
        /**
         * A `rejectedLinkedService` block as defined below.
         */
        rejectedLinkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSinkRejectedLinkedService>;
        /**
         * A `schemaLinkedService` block as defined below.
         */
        schemaLinkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSinkSchemaLinkedService>;
    }
    interface FlowletDataFlowSinkDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSinkFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSinkLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSinkRejectedLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSinkSchemaLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSource {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.FlowletDataFlowSourceDataset>;
        /**
         * The description for the Data Flow Source.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.FlowletDataFlowSourceFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSourceLinkedService>;
        /**
         * The name for the Data Flow Source.
         */
        name: pulumi.Input<string>;
        /**
         * A `rejectedLinkedService` block as defined below.
         */
        rejectedLinkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSourceRejectedLinkedService>;
        /**
         * A `schemaLinkedService` block as defined below.
         */
        schemaLinkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowSourceSchemaLinkedService>;
    }
    interface FlowletDataFlowSourceDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSourceFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSourceLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSourceRejectedLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowSourceSchemaLinkedService {
        /**
         * The name for the Data Factory Linked Service with schema.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowTransformation {
        /**
         * A `dataset` block as defined below.
         */
        dataset?: pulumi.Input<inputs.datafactory.FlowletDataFlowTransformationDataset>;
        /**
         * The description for the Data Flow transformation.
         */
        description?: pulumi.Input<string>;
        /**
         * A `flowlet` block as defined below.
         */
        flowlet?: pulumi.Input<inputs.datafactory.FlowletDataFlowTransformationFlowlet>;
        /**
         * A `linkedService` block as defined below.
         */
        linkedService?: pulumi.Input<inputs.datafactory.FlowletDataFlowTransformationLinkedService>;
        /**
         * The name for the Data Flow transformation.
         */
        name: pulumi.Input<string>;
    }
    interface FlowletDataFlowTransformationDataset {
        /**
         * The name for the Data Factory Dataset.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory dataset.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowTransformationFlowlet {
        /**
         * Specifies the reference data flow parameters from dataset.
         */
        datasetParameters?: pulumi.Input<string>;
        /**
         * The name for the Data Factory Flowlet.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Flowlet.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface FlowletDataFlowTransformationLinkedService {
        /**
         * The name for the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface IntegrationRuntimeSelfHostedRbacAuthorization {
        /**
         * The resource identifier of the integration runtime to be shared.
         *
         * > **Please Note**: RBAC Authorization creates a [linked Self-hosted Integration Runtime targeting the Shared Self-hosted Integration Runtime in resourceId](https://docs.microsoft.com/azure/data-factory/create-shared-self-hosted-integration-runtime-powershell#share-the-self-hosted-integration-runtime-with-another-data-factory). The linked Self-hosted Integration Runtime needs Contributor access granted to the Shared Self-hosted Data Factory.
         *
         * For more information on the configuration, please check out the [Azure documentation](https://docs.microsoft.com/rest/api/datafactory/integrationruntimes/createorupdate#linkedintegrationruntimerbacauthorization)
         */
        resourceId: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisCatalogInfo {
        /**
         * Administrator login name for the SQL Server.
         */
        administratorLogin?: pulumi.Input<string>;
        /**
         * Administrator login password for the SQL Server.
         */
        administratorPassword?: pulumi.Input<string>;
        /**
         * The dual standby Azure-SSIS Integration Runtime pair with SSISDB failover.
         */
        dualStandbyPairName?: pulumi.Input<string>;
        /**
         * The name of SQL elastic pool where the database will be created for the SSIS catalog. Mutually exclusive with `pricingTier`.
         */
        elasticPoolName?: pulumi.Input<string>;
        /**
         * Pricing tier for the database that will be created for the SSIS catalog. Valid values are: `Basic`, `S0`, `S1`, `S2`, `S3`, `S4`, `S6`, `S7`, `S9`, `S12`, `P1`, `P2`, `P4`, `P6`, `P11`, `P15`, `GP_S_Gen5_1`, `GP_S_Gen5_2`, `GP_S_Gen5_4`, `GP_S_Gen5_6`, `GP_S_Gen5_8`, `GP_S_Gen5_10`, `GP_S_Gen5_12`, `GP_S_Gen5_14`, `GP_S_Gen5_16`, `GP_S_Gen5_18`, `GP_S_Gen5_20`, `GP_S_Gen5_24`, `GP_S_Gen5_32`, `GP_S_Gen5_40`, `GP_Gen5_2`, `GP_Gen5_4`, `GP_Gen5_6`, `GP_Gen5_8`, `GP_Gen5_10`, `GP_Gen5_12`, `GP_Gen5_14`, `GP_Gen5_16`, `GP_Gen5_18`, `GP_Gen5_20`, `GP_Gen5_24`, `GP_Gen5_32`, `GP_Gen5_40`, `GP_Gen5_80`, `BC_Gen5_2`, `BC_Gen5_4`, `BC_Gen5_6`, `BC_Gen5_8`, `BC_Gen5_10`, `BC_Gen5_12`, `BC_Gen5_14`, `BC_Gen5_16`, `BC_Gen5_18`, `BC_Gen5_20`, `BC_Gen5_24`, `BC_Gen5_32`, `BC_Gen5_40`, `BC_Gen5_80`, `HS_Gen5_2`, `HS_Gen5_4`, `HS_Gen5_6`, `HS_Gen5_8`, `HS_Gen5_10`, `HS_Gen5_12`, `HS_Gen5_14`, `HS_Gen5_16`, `HS_Gen5_18`, `HS_Gen5_20`, `HS_Gen5_24`, `HS_Gen5_32`, `HS_Gen5_40` and `HS_Gen5_80`. Mutually exclusive with `elasticPoolName`.
         */
        pricingTier?: pulumi.Input<string>;
        /**
         * The endpoint of an Azure SQL Server that will be used to host the SSIS catalog.
         */
        serverEndpoint: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisCopyComputeScale {
        /**
         * Specifies the data integration unit number setting reserved for copy activity execution. Supported values are multiples of `4` in range 4-256.
         */
        dataIntegrationUnit?: pulumi.Input<number>;
        /**
         * Specifies the time to live (in minutes) setting of integration runtime which will execute copy activity. Possible values are at least `5`.
         */
        timeToLive?: pulumi.Input<number>;
    }
    interface IntegrationRuntimeSsisCustomSetupScript {
        /**
         * The blob endpoint for the container which contains a custom setup script that will be run on every node on startup. See [https://docs.microsoft.com/azure/data-factory/how-to-configure-azure-ssis-ir-custom-setup](https://docs.microsoft.com/azure/data-factory/how-to-configure-azure-ssis-ir-custom-setup) for more information.
         */
        blobContainerUri: pulumi.Input<string>;
        /**
         * A container SAS token that gives access to the files. See [https://docs.microsoft.com/azure/data-factory/how-to-configure-azure-ssis-ir-custom-setup](https://docs.microsoft.com/azure/data-factory/how-to-configure-azure-ssis-ir-custom-setup) for more information.
         */
        sasToken: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressCustomSetup {
        /**
         * One or more `commandKey` blocks as defined below.
         */
        commandKeys?: pulumi.Input<pulumi.Input<inputs.datafactory.IntegrationRuntimeSsisExpressCustomSetupCommandKey>[]>;
        /**
         * One or more `component` blocks as defined below.
         */
        components?: pulumi.Input<pulumi.Input<inputs.datafactory.IntegrationRuntimeSsisExpressCustomSetupComponent>[]>;
        /**
         * The Environment Variables for the Azure-SSIS Integration Runtime.
         */
        environment?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The version of Azure Powershell installed for the Azure-SSIS Integration Runtime.
         *
         * > **Note:** At least one of `env`, `powershellVersion`, `component` and `commandKey` should be specified.
         */
        powershellVersion?: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressCustomSetupCommandKey {
        /**
         * A `keyVaultSecretReference` block as defined below.
         */
        keyVaultPassword?: pulumi.Input<inputs.datafactory.IntegrationRuntimeSsisExpressCustomSetupCommandKeyKeyVaultPassword>;
        /**
         * The password for the target device.
         */
        password?: pulumi.Input<string>;
        /**
         * The target computer or domain name.
         */
        targetName: pulumi.Input<string>;
        /**
         * The username for the target device.
         */
        userName: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressCustomSetupCommandKeyKeyVaultPassword {
        linkedServiceName: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Key Vault Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies the secret name in Azure Key Vault.
         */
        secretName: pulumi.Input<string>;
        /**
         * Specifies the secret version in Azure Key Vault.
         */
        secretVersion?: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressCustomSetupComponent {
        /**
         * A `keyVaultSecretReference` block as defined below.
         */
        keyVaultLicense?: pulumi.Input<inputs.datafactory.IntegrationRuntimeSsisExpressCustomSetupComponentKeyVaultLicense>;
        /**
         * The license used for the Component.
         */
        license?: pulumi.Input<string>;
        /**
         * The Component Name installed for the Azure-SSIS Integration Runtime.
         */
        name: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressCustomSetupComponentKeyVaultLicense {
        linkedServiceName: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the Key Vault Data Factory Linked Service.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies the secret name in Azure Key Vault.
         */
        secretName: pulumi.Input<string>;
        /**
         * Specifies the secret version in Azure Key Vault.
         */
        secretVersion?: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisExpressVnetIntegration {
        /**
         * id of the subnet to which the nodes of the Azure-SSIS Integration Runtime will be added.
         */
        subnetId: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisPackageStore {
        /**
         * Name of the Linked Service to associate with the packages.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Name of the package store.
         */
        name: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisPipelineExternalComputeScale {
        /**
         * Specifies the number of the external nodes, which should be greater than `0` and less than `11`.
         */
        numberOfExternalNodes?: pulumi.Input<number>;
        /**
         * Specifies the number of the pipeline nodes, which should be greater than `0` and less than `11`.
         */
        numberOfPipelineNodes?: pulumi.Input<number>;
        /**
         * Specifies the time to live (in minutes) setting of integration runtime which will execute copy activity. Possible values are at least `5`.
         */
        timeToLive?: pulumi.Input<number>;
    }
    interface IntegrationRuntimeSsisProxy {
        /**
         * The path in the data store to be used when moving data between Self-Hosted and Azure-SSIS Integration Runtimes.
         */
        path?: pulumi.Input<string>;
        /**
         * Name of Self Hosted Integration Runtime as a proxy.
         */
        selfHostedIntegrationRuntimeName: pulumi.Input<string>;
        /**
         * Name of Azure Blob Storage linked service to reference the staging data store to be used when moving data between self-hosted and Azure-SSIS integration runtimes.
         */
        stagingStorageLinkedServiceName: pulumi.Input<string>;
    }
    interface IntegrationRuntimeSsisVnetIntegration {
        /**
         * Static public IP addresses for the Azure-SSIS Integration Runtime. The size must be 2.
         */
        publicIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * id of the subnet to which the nodes of the Azure-SSIS Integration Runtime will be added.
         *
         * > **Note:** Only one of `subnetId` and `subnetName` can be specified. If `subnetName` is specified, `vnetId` must be provided.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * Name of the subnet to which the nodes of the Azure-SSIS Integration Runtime will be added.
         */
        subnetName?: pulumi.Input<string>;
        /**
         * ID of the virtual network to which the nodes of the Azure-SSIS Integration Runtime will be added.
         */
        vnetId?: pulumi.Input<string>;
    }
    interface LinkedCustomServiceIntegrationRuntime {
        /**
         * The integration runtime reference to associate with the Data Factory Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the integration runtime.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface LinkedServiceAzureBlobStorageKeyVaultSasToken {
        linkedServiceName: pulumi.Input<string>;
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureBlobStorageSasTokenLinkedKeyVaultKey {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores the SAS token.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureBlobStorageServicePrincipalLinkedKeyVaultKey {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores the Service Principal key.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureDatabricksInstancePool {
        /**
         * Spark version of a the cluster.
         */
        clusterVersion: pulumi.Input<string>;
        /**
         * Identifier of the instance pool within the linked ADB instance.
         */
        instancePoolId: pulumi.Input<string>;
        /**
         * The max number of worker nodes. Set this value if you want to enable autoscaling between the `minNumberOfWorkers` and this value. Omit this value to use a fixed number of workers defined in the `minNumberOfWorkers` property.
         */
        maxNumberOfWorkers?: pulumi.Input<number>;
        /**
         * The minimum number of worker nodes. Defaults to `1`.
         */
        minNumberOfWorkers?: pulumi.Input<number>;
    }
    interface LinkedServiceAzureDatabricksKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores ADB access token.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureDatabricksNewClusterConfig {
        /**
         * Spark version of a the cluster.
         */
        clusterVersion: pulumi.Input<string>;
        /**
         * Tags for the cluster resource.
         */
        customTags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Driver node type for the cluster.
         */
        driverNodeType?: pulumi.Input<string>;
        /**
         * User defined initialization scripts for the cluster.
         */
        initScripts?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Location to deliver Spark driver, worker, and event logs.
         */
        logDestination?: pulumi.Input<string>;
        /**
         * Specifies the maximum number of worker nodes. It should be between 1 and 25000.
         */
        maxNumberOfWorkers?: pulumi.Input<number>;
        /**
         * Specifies the minimum number of worker nodes. It should be between 1 and 25000. It defaults to `1`.
         */
        minNumberOfWorkers?: pulumi.Input<number>;
        /**
         * Node type for the new cluster.
         */
        nodeType: pulumi.Input<string>;
        /**
         * User-specified Spark configuration variables key-value pairs.
         */
        sparkConfig?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * User-specified Spark environment variables key-value pairs.
         */
        sparkEnvironmentVariables?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface LinkedServiceAzureFileStorageKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores Azure File Storage password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureFunctionKeyVaultKey {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores the system key of the Azure Function.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureSqlDatabaseKeyVaultConnectionString {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Server connection string.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceAzureSqlDatabaseKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Server password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceOdataBasicAuthentication {
        /**
         * The password associated with the username, which can be used to authenticate to the OData endpoint.
         */
        password: pulumi.Input<string>;
        /**
         * The username which can be used to authenticate to the OData endpoint.
         */
        username: pulumi.Input<string>;
    }
    interface LinkedServiceOdbcBasicAuthentication {
        /**
         * The password associated with the username, which can be used to authenticate to the ODBC endpoint.
         */
        password: pulumi.Input<string>;
        /**
         * The username which can be used to authenticate to the ODBC endpoint.
         */
        username: pulumi.Input<string>;
    }
    interface LinkedServiceSftpKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the name of the secret containing the password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSftpKeyVaultPrivateKeyContentBase64 {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the name of the secret containing the Base64 encoded SSH private key.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSftpKeyVaultPrivateKeyPassphrase {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the name of the secret containing the SSH private key passphrase.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSnowflakeKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores Snowflake password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSqlManagedInstanceKeyVaultConnectionString {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Managed Instance connection string.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSqlManagedInstanceKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Managed Instance password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSqlServerKeyVaultConnectionString {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Server connection string.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSqlServerKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores SQL Server password.
         */
        secretName: pulumi.Input<string>;
    }
    interface LinkedServiceSynapseKeyVaultPassword {
        /**
         * Specifies the name of an existing Key Vault Data Factory Linked Service.
         */
        linkedServiceName: pulumi.Input<string>;
        /**
         * Specifies the secret name in Azure Key Vault that stores Synapse password.
         */
        secretName: pulumi.Input<string>;
    }
    interface TriggerBlobEventPipeline {
        /**
         * The Data Factory Pipeline name that the trigger will act on.
         */
        name: pulumi.Input<string>;
        /**
         * The Data Factory Pipeline parameters that the trigger will act on.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface TriggerCustomEventPipeline {
        /**
         * The Data Factory Pipeline name that the trigger will act on.
         */
        name: pulumi.Input<string>;
        /**
         * The Data Factory Pipeline parameters that the trigger will act on.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface TriggerSchedulePipeline {
        /**
         * Reference pipeline name.
         */
        name: pulumi.Input<string>;
        /**
         * The pipeline parameters that the trigger will act upon.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface TriggerScheduleSchedule {
        /**
         * Day(s) of the month on which the trigger is scheduled. This value can be specified with a monthly frequency only.
         */
        daysOfMonths?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Days of the week on which the trigger is scheduled. This value can be specified only with a weekly frequency.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Hours of the day on which the trigger is scheduled.
         */
        hours?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Minutes of the hour on which the trigger is scheduled.
         */
        minutes?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * A `monthly` block as documented below, which specifies the days of the month on which the trigger is scheduled. The value can be specified only with a monthly frequency.
         */
        monthlies?: pulumi.Input<pulumi.Input<inputs.datafactory.TriggerScheduleScheduleMonthly>[]>;
    }
    interface TriggerScheduleScheduleMonthly {
        /**
         * The occurrence of the specified day during the month. For example, a `monthly` property with `weekday` and `week` values of `Sunday, -1` means the last Sunday of the month.
         */
        week?: pulumi.Input<number>;
        /**
         * The day of the week on which the trigger runs. For example, a `monthly` property with a `weekday` value of `Sunday` means every Sunday of the month.
         */
        weekday: pulumi.Input<string>;
    }
    interface TriggerTumblingWindowPipeline {
        /**
         * The Data Factory Pipeline name that the trigger will act on.
         */
        name: pulumi.Input<string>;
        /**
         * The Data Factory Pipeline parameters that the trigger will act on.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface TriggerTumblingWindowRetry {
        /**
         * The maximum retry attempts if the pipeline run failed.
         */
        count: pulumi.Input<number>;
        /**
         * The Interval in seconds between each retry if the pipeline run failed. Defaults to `30`.
         */
        interval?: pulumi.Input<number>;
    }
    interface TriggerTumblingWindowTriggerDependency {
        /**
         * The offset of the dependency trigger. Must be in Timespan format (±hh:mm:ss) and must be a negative offset for a self dependency.
         */
        offset?: pulumi.Input<string>;
        /**
         * The size of the dependency tumbling window. Must be in Timespan format (hh:mm:ss).
         */
        size?: pulumi.Input<string>;
        /**
         * The dependency trigger name. If not specified, it will use self dependency.
         */
        triggerName?: pulumi.Input<string>;
    }
}
export declare namespace dataprotection {
    interface BackupInstanceKubernetesClusterBackupDatasourceParameters {
        /**
         * Whether to include cluster scope resources during backup. Default to `false`. Changing this forces a new resource to be created.
         */
        clusterScopedResourcesEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the namespaces to be excluded during backup. Changing this forces a new resource to be created.
         */
        excludedNamespaces?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the resource types to be excluded during backup. Changing this forces a new resource to be created.
         */
        excludedResourceTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the namespaces to be included during backup. Changing this forces a new resource to be created.
         */
        includedNamespaces?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the resource types to be included during backup. Changing this forces a new resource to be created.
         */
        includedResourceTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the resources with such label selectors to be included during backup. Changing this forces a new resource to be created.
         */
        labelSelectors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether to take volume snapshots during backup. Default to `false`. Changing this forces a new resource to be created.
         */
        volumeSnapshotEnabled?: pulumi.Input<boolean>;
    }
    interface BackupPolicyBlobStorageRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyBlobStorageRetentionRuleCriteria>;
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        lifeCycle: pulumi.Input<inputs.dataprotection.BackupPolicyBlobStorageRetentionRuleLifeCycle>;
        /**
         * The name which should be used for this retention rule. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The priority number must be unique for each rule. The lower the priority number, the higher the priority of the rule. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyBlobStorageRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Must be between `0` and `28`. `0` for last day within the month. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        daysOfMonths?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Possible values are `Monday`, `Tuesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`. Changing this forces a new Backup Policy Blob Storage to be created. When this property is specified, exactly one of the following must also be set: `daysOfMonth`, `daysOfWeek`
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`. Changing this forces a new Backup Policy Blob Storage to be created. When this property is specified, exactly one of the following must also be set: `daysOfMonth`, `daysOfWeek`
         *
         * > **Note:** When not using `absoluteCriteria`, you must use exactly one of `daysOfMonth` or `daysOfWeek`. Regarding the remaining two properties, `weeksOfMonth` and `monthsOfYear`, you may use either, both, or neither. If you would like to set multiple intervals, you may do so by using multiple `retentionRule` blocks.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupPolicyBlobStorageRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `VaultStore`. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new Backup Policy Blob Storage to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyDataLakeStorageRetentionRule {
        /**
         * Specifies the absolute criteria for the retention rule. Possible values include `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth`, and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new resource to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Specifies a list of days of the week on which the retention rule applies. Possible values include `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, and `Sunday`. Changing this forces a new resource to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
        /**
         * Specifies a list of months of the year on which the retention rule applies. Possible values include `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November`, and `December`. Changing this forces a new resource to be created.
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the retention rule. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new resource to be created.
         *
         * > **Note:** At least one of `absoluteCriteria` or `daysOfWeek` must be specified. `weeksOfMonth` and `monthsOfYear` are optional and can be supplied together. Multiple intervals may be set using multiple `retentionRule` blocks.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of weeks of the month on which the retention rule applies. Possible values include `First`, `Second`, `Third`, `Fourth`, and `Last`. Changing this forces a new resource to be created.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupPolicyDiskRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new Backup Policy Disk to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyDiskRetentionRuleCriteria>;
        /**
         * Duration of deletion after given timespan. It should follow `ISO 8601` duration format. Changing this forces a new Backup Policy Disk to be created.
         */
        duration: pulumi.Input<string>;
        /**
         * The name which should be used for this retention rule. Changing this forces a new Backup Policy Disk to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Retention Tag priority. Changing this forces a new Backup Policy Disk to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyDiskRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new Backup Policy Disk to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
    }
    interface BackupPolicyKubernetesClusterDefaultRetentionRule {
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyKubernetesClusterDefaultRetentionRuleLifeCycle>[]>;
    }
    interface BackupPolicyKubernetesClusterDefaultRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `OperationalStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyKubernetesClusterRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new resource to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyKubernetesClusterRetentionRuleCriteria>;
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyKubernetesClusterRetentionRuleLifeCycle>[]>;
        /**
         * The name which should be used for this retention rule. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The priority number must be unique for each rule. The lower the priority number, the higher the priority of the rule. Changing this forces a new resource to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyKubernetesClusterRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new resource to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Possible values are `Monday`, `Tuesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`. Changing this forces a new resource to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`. Changing this forces a new resource to be created.
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new resource to be created.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`. Changing this forces a new resource to be created.
         *
         * > **Note:** When not using `absoluteCriteria`, you must use exactly one of `daysOfMonth` or `daysOfWeek`. Regarding the remaining two properties, `weeksOfMonth` and `monthsOfYear`, you may use either, both, or neither. If you would like to set multiple intervals, you may do so by using multiple `retentionRule` blocks.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupPolicyKubernetesClusterRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `OperationalStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyMysqlFlexibleServerDefaultRetentionRule {
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyMysqlFlexibleServerDefaultRetentionRuleLifeCycle>[]>;
    }
    interface BackupPolicyMysqlFlexibleServerDefaultRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `VaultStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyMysqlFlexibleServerRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new resource to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyMysqlFlexibleServerRetentionRuleCriteria>;
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyMysqlFlexibleServerRetentionRuleLifeCycle>[]>;
        /**
         * Specifies the name of the retention rule. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The priority number must be unique for each rule. The lower the priority number, the higher the priority of the rule. Changing this forces a new resource to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyMysqlFlexibleServerRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new resource to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`. Changing this forces a new resource to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`. Changing this forces a new resource to be created.
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new resource to be created.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`. Changing this forces a new resource to be created.
         *
         * > **Note:** When not using `absoluteCriteria`, you must use exactly one of `daysOfMonth` or `daysOfWeek`. Regarding the remaining two properties, `weeksOfMonth` and `monthsOfYear`, you may use either, both, or neither. If you would like to set multiple intervals, you may do so by using multiple `retentionRule` blocks.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupPolicyMysqlFlexibleServerRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `VaultStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyPostgresqlFlexibleServerDefaultRetentionRule {
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyPostgresqlFlexibleServerDefaultRetentionRuleLifeCycle>[]>;
    }
    interface BackupPolicyPostgresqlFlexibleServerDefaultRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `VaultStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyPostgresqlFlexibleServerRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new resource to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyPostgresqlFlexibleServerRetentionRuleCriteria>;
        /**
         * A `lifeCycle` block as defined below. Changing this forces a new resource to be created.
         */
        lifeCycles: pulumi.Input<pulumi.Input<inputs.dataprotection.BackupPolicyPostgresqlFlexibleServerRetentionRuleLifeCycle>[]>;
        /**
         * Specifies the name of the retention rule. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The priority number must be unique for each rule. The lower the priority number, the higher the priority of the rule. Changing this forces a new resource to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyPostgresqlFlexibleServerRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new resource to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`. Changing this forces a new resource to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`. Changing this forces a new resource to be created.
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new resource to be created.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`. Changing this forces a new resource to be created.
         *
         * > **Note:** When not using `absoluteCriteria`, you must use exactly one of `daysOfMonth` or `daysOfWeek`. Regarding the remaining two properties, `weeksOfMonth` and `monthsOfYear`, you may use either, both, or neither. If you would like to set multiple intervals, you may do so by using multiple `retentionRule` blocks.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupPolicyPostgresqlFlexibleServerRetentionRuleLifeCycle {
        /**
         * The type of data store. The only possible value is `VaultStore`. Changing this forces a new resource to be created.
         */
        dataStoreType: pulumi.Input<string>;
        /**
         * The retention duration up to which the backups are to be retained in the data stores. It should follow `ISO 8601` duration format. Changing this forces a new resource to be created.
         */
        duration: pulumi.Input<string>;
    }
    interface BackupPolicyPostgresqlRetentionRule {
        /**
         * A `criteria` block as defined below. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        criteria: pulumi.Input<inputs.dataprotection.BackupPolicyPostgresqlRetentionRuleCriteria>;
        /**
         * Duration after which the backup is deleted. It should follow `ISO 8601` duration format. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        duration: pulumi.Input<string>;
        /**
         * The name which should be used for this retention rule. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The priority number must be unique for each rule. The lower the priority number, the higher the priority of the rule. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        priority: pulumi.Input<number>;
    }
    interface BackupPolicyPostgresqlRetentionRuleCriteria {
        /**
         * Possible values are `AllBackup`, `FirstOfDay`, `FirstOfWeek`, `FirstOfMonth` and `FirstOfYear`. These values mean the first successful backup of the day/week/month/year. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        absoluteCriteria?: pulumi.Input<string>;
        /**
         * Possible values are `Monday`, `Tuesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `January`, `February`, `March`, `April`, `May`, `June`, `July`, `August`, `September`, `October`, `November` and `December`. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        monthsOfYears?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of backup times for backup in the `RFC3339` format. Changing this forces a new Backup Policy PostgreSQL to be created.
         */
        scheduledBackupTimes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Possible values are `First`, `Second`, `Third`, `Fourth` and `Last`. Changing this forces a new Backup Policy PostgreSQL to be created.
         *
         * > **Note:** When not using `absoluteCriteria`, you must use exactly one of `daysOfMonth` or `daysOfWeek`. Regarding the remaining two properties, `weeksOfMonth` and `monthsOfYear`, you may use either, both, or neither. If you would like to set multiple intervals, you may do so by using multiple `retentionRule` blocks.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface BackupVaultIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Backup Vault.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Backup Vault.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Backup Vault.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Backup Vault. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace datashare {
    interface AccountIdentity {
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Data Share Account.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Data Share Account.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Data Share Account. The only possible value is `SystemAssigned`. Changing this forces a new resource to be created.
         *
         * > **Note:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and the Data Share Account has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface DatasetBlobStorageStorageAccount {
        /**
         * The name of the storage account to be shared with the receiver. Changing this forces a new Data Share Blob Storage Dataset to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The resource group name of the storage account to be shared with the receiver. Changing this forces a new Data Share Blob Storage Dataset to be created.
         */
        resourceGroupName: pulumi.Input<string>;
        /**
         * The subscription id of the storage account to be shared with the receiver. Changing this forces a new Data Share Blob Storage Dataset to be created.
         */
        subscriptionId: pulumi.Input<string>;
    }
    interface ShareSnapshotSchedule {
        /**
         * The name of the snapshot schedule.
         */
        name: pulumi.Input<string>;
        /**
         * The interval of the synchronization with the source data. Possible values are `Hour` and `Day`.
         */
        recurrence: pulumi.Input<string>;
        /**
         * The synchronization with the source data's start time.
         */
        startTime: pulumi.Input<string>;
    }
}
export declare namespace desktopvirtualization {
    interface HostPoolScheduledAgentUpdates {
        /**
         * Enables or disables scheduled updates of the AVD agent components (RDAgent, Geneva Monitoring agent, and side-by-side stack) on session hosts. If this is enabled then up to two `schedule` blocks must be defined. Default is `false`.
         *
         * > **Note:** if `enabled` is set to `true` then at least one and a maximum of two `schedule` blocks must be provided.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * A `schedule` block as defined below. A maximum of two blocks can be added.
         */
        schedules?: pulumi.Input<pulumi.Input<inputs.desktopvirtualization.HostPoolScheduledAgentUpdatesSchedule>[]>;
        /**
         * Specifies the time zone in which the agent update schedule will apply, [the possible values are defined here](https://jackstromberg.com/2017/01/list-of-time-zones-consumed-by-azure/). If `useSessionHostTimezone` is enabled then it will override this setting. Default is `UTC`
         */
        timezone?: pulumi.Input<string>;
        /**
         * Specifies whether scheduled agent updates should be applied based on the timezone of the affected session host. If configured then this setting overrides `timezone`. Default is `false`.
         */
        useSessionHostTimezone?: pulumi.Input<boolean>;
    }
    interface HostPoolScheduledAgentUpdatesSchedule {
        /**
         * The day of the week on which agent updates should be performed. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, and `Sunday`
         */
        dayOfWeek: pulumi.Input<string>;
        /**
         * The hour of day the update window should start. The update is a 2 hour period following the hour provided. The value should be provided as a number between 0 and 23, with 0 being midnight and 23 being 11pm. A leading zero should not be used.
         */
        hourOfDay: pulumi.Input<number>;
    }
    interface ScalingPlanHostPool {
        /**
         * The ID of the HostPool to assign the Scaling Plan to.
         */
        hostpoolId: pulumi.Input<string>;
        /**
         * Specifies if the scaling plan is enabled or disabled for the HostPool.
         */
        scalingPlanEnabled: pulumi.Input<boolean>;
    }
    interface ScalingPlanSchedule {
        /**
         * A list of Days of the Week on which this schedule will be used. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, and `Sunday`
         */
        daysOfWeeks: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the schedule.
         */
        name: pulumi.Input<string>;
        /**
         * The load Balancing Algorithm to use during Off-Peak Hours. Possible values are `DepthFirst` and `BreadthFirst`.
         */
        offPeakLoadBalancingAlgorithm: pulumi.Input<string>;
        /**
         * The time at which Off-Peak scaling will begin. This is also the end-time for the Ramp-Down period. The time must be specified in "HH:MM" format.
         */
        offPeakStartTime: pulumi.Input<string>;
        /**
         * The load Balancing Algorithm to use during Peak Hours. Possible values are `DepthFirst` and `BreadthFirst`.
         */
        peakLoadBalancingAlgorithm: pulumi.Input<string>;
        /**
         * The time at which Peak scaling will begin. This is also the end-time for the Ramp-Up period. The time must be specified in "HH:MM" format.
         */
        peakStartTime: pulumi.Input<string>;
        /**
         * This is the value in percentage of used host pool capacity that will be considered to evaluate whether to turn on/off virtual machines during the ramp-down and off-peak hours. For example, if capacity threshold is specified as 60% and your total host pool capacity is 100 sessions, autoscale will turn on additional session hosts once the host pool exceeds a load of 60 sessions.
         */
        rampDownCapacityThresholdPercent: pulumi.Input<number>;
        /**
         * Whether users will be forced to log-off session hosts once the `rampDownWaitTimeMinutes` value has been exceeded during the Ramp-Down period. Possible values are `true` and `false`.
         */
        rampDownForceLogoffUsers: pulumi.Input<boolean>;
        /**
         * The load Balancing Algorithm to use during the Ramp-Down period. Possible values are `DepthFirst` and `BreadthFirst`.
         */
        rampDownLoadBalancingAlgorithm: pulumi.Input<string>;
        /**
         * The minimum percentage of session host virtual machines that you would like to get to for ramp-down and off-peak hours. For example, if Minimum percentage of hosts is specified as 10% and total number of session hosts in your host pool is 10, autoscale will ensure a minimum of 1 session host is available to take user connections.
         */
        rampDownMinimumHostsPercent: pulumi.Input<number>;
        /**
         * The notification message to send to users during Ramp-Down period when they are required to log-off.
         */
        rampDownNotificationMessage: pulumi.Input<string>;
        /**
         * The time at which Ramp-Down scaling will begin. This is also the end-time for the Ramp-Up period. The time must be specified in "HH:MM" format.
         */
        rampDownStartTime: pulumi.Input<string>;
        /**
         * Controls Session Host shutdown behaviour during Ramp-Down period. Session Hosts can either be shutdown when all sessions on the Session Host have ended, or when there are no Active sessions left on the Session Host. Possible values are `ZeroSessions` and `ZeroActiveSessions`.
         */
        rampDownStopHostsWhen: pulumi.Input<string>;
        /**
         * The number of minutes during Ramp-Down period that autoscale will wait after setting the session host VMs to drain mode, notifying any currently signed in users to save their work before forcing the users to logoff. Once all user sessions on the session host VM have been logged off, Autoscale will shut down the VM.
         */
        rampDownWaitTimeMinutes: pulumi.Input<number>;
        /**
         * This is the value of percentage of used host pool capacity that will be considered to evaluate whether to turn on/off virtual machines during the ramp-up and peak hours. For example, if capacity threshold is specified as `60%` and your total host pool capacity is `100` sessions, autoscale will turn on additional session hosts once the host pool exceeds a load of `60` sessions.
         */
        rampUpCapacityThresholdPercent?: pulumi.Input<number>;
        /**
         * The load Balancing Algorithm to use during the Ramp-Up period. Possible values are `DepthFirst` and `BreadthFirst`.
         */
        rampUpLoadBalancingAlgorithm: pulumi.Input<string>;
        /**
         * Specifies the minimum percentage of session host virtual machines to start during ramp-up for peak hours. For example, if Minimum percentage of hosts is specified as `10%` and total number of session hosts in your host pool is `10`, autoscale will ensure a minimum of `1` session host is available to take user connections.
         */
        rampUpMinimumHostsPercent?: pulumi.Input<number>;
        /**
         * The time at which Ramp-Up scaling will begin. This is also the end-time for the Ramp-Up period. The time must be specified in "HH:MM" format.
         */
        rampUpStartTime: pulumi.Input<string>;
    }
}
export declare namespace devcenter {
    interface CatalogCatalogAdogit {
        /**
         * The Git branch of the Dev Center Catalog.
         */
        branch: pulumi.Input<string>;
        /**
         * A reference to the Key Vault secret containing a security token to authenticate to a Git repository.
         */
        keyVaultKeyUrl: pulumi.Input<string>;
        /**
         * The folder where the catalog items can be found inside the repository.
         */
        path: pulumi.Input<string>;
        /**
         * The Git URI of the Dev Center Catalog.
         */
        uri: pulumi.Input<string>;
    }
    interface CatalogCatalogGithub {
        /**
         * The Git branch of the Dev Center Catalog.
         */
        branch: pulumi.Input<string>;
        /**
         * A reference to the Key Vault secret containing a security token to authenticate to a Git repository.
         */
        keyVaultKeyUrl: pulumi.Input<string>;
        /**
         * The folder where the catalog items can be found inside the repository.
         */
        path: pulumi.Input<string>;
        /**
         * The Git URI of the Dev Center Catalog.
         */
        uri: pulumi.Input<string>;
    }
    interface DevCenterIdentity {
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        type: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolAzureDevopsOrganization {
        /**
         * One or more `organization` blocks as defined below.
         */
        organizations: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolAzureDevopsOrganizationOrganization>[]>;
        /**
         * A `permission` block as defined below. Changing this forces a new resource to be created.
         */
        permission?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolAzureDevopsOrganizationPermission>;
    }
    interface ManagedDevOpsPoolAzureDevopsOrganizationOrganization {
        /**
         * Specifies how many machines can be created at maximum in this organization out of the `maximumConcurrency` of the pool. Possible values range between `1` and `10000`.
         *
         * > **Note:** The sum of `parallelism` across orgs should be equal to `maximumConcurrency`.
         */
        parallelism: pulumi.Input<number>;
        /**
         * List of projects in which the pool should be created.
         *
         * > **Note:** Please refer to [Azure DevOps Project Names](https://learn.microsoft.com/azure/devops/organizations/settings/naming-restrictions?view=azure-devops#project-names) for more information on project naming restrictions.
         */
        projects?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Azure DevOps organization URL in which the pool should be created. It must end with a letter or number.
         */
        url: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolAzureDevopsOrganizationPermission {
        /**
         * An `administratorAccount` block as defined below. This block is only valid when `kind` is set to `SpecificAccounts`. Changing this forces a new resource to be created.
         */
        administratorAccount?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolAzureDevopsOrganizationPermissionAdministratorAccount>;
        /**
         * Determines who has admin permissions to the Azure DevOps pool. Possible values are `Inherit` and `SpecificAccounts`. Changing this forces a new resource to be created.
         */
        kind: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolAzureDevopsOrganizationPermissionAdministratorAccount {
        /**
         * Specifies a list of group email addresses. Changing this forces a new resource to be created.
         */
        groups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of user email addresses. Changing this forces a new resource to be created.
         *
         * > **Note:** At least one of `groups` and `users` must be specified.
         */
        users?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ManagedDevOpsPoolIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of managed service identity. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgent {
        /**
         * An `automaticResourcePrediction` block as defined below.
         */
        automaticResourcePrediction?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentAutomaticResourcePrediction>;
        /**
         * Configures the amount of time an agent in a `stateful` pool waits for new jobs before shutting down after all current and queued jobs are complete. The format for Grace Period is `dd.hh:mm:ss` or `hh:mm:ss`. Defaults to `00:00:00`.
         */
        gracePeriodTimeSpan?: pulumi.Input<string>;
        /**
         * A `manualResourcePrediction` block as defined below.
         */
        manualResourcePrediction?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePrediction>;
        /**
         * Configures the maximum duration an agent in a `stateful` pool can run before it is shut down and discarded. The format for Max time to live for standby agents is `dd.hh:mm:ss` or `hh:mm:ss`. Defaults to `7.00:00:00`.
         *
         * > **Note:** Exactly one of `manualResourcePrediction` or `automaticResourcePrediction` may be specified.
         */
        maximumAgentLifetime?: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentAutomaticResourcePrediction {
        /**
         * Specifies the desired balance between cost and performance. Possible values are `MostCostEffective`, `MoreCostEffective`, `Balanced`, `MorePerformance`, and `BestPerformance`. Defaults to `Balanced`.
         */
        predictionPreference?: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePrediction {
        /**
         * A number of agents available 24/7 all week. Possible values range between `1` and `maximumConcurrency`.
         */
        allWeekSchedule?: pulumi.Input<number>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        fridaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionFridaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        mondaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionMondaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        saturdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionSaturdaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        sundaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionSundaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        thursdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionThursdaySchedule>[]>;
        /**
         * Specifies the time zone for the predictions data to be provisioned at. Defaults to `UTC`.
         *
         * > **Note:** A list of possible values for `timeZoneName` are available by executing `[System.TimeZoneInfo]::GetSystemTimeZones()` in PowerShell.
         */
        timeZoneName?: pulumi.Input<string>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        tuesdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionTuesdaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         *
         * > **Note:** Exactly one of `allWeekSchedule` or at least one individual daily schedule block must be specified.
         *
         * > **Note:** Please refer to [Microsoft documentation](https://learn.microsoft.com/azure/devops/managed-devops-pools/configure-scaling?view=azure-devops&tabs=azure-cli#manual) for more information about the manual predictions setup.
         */
        wednesdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatefulAgentManualResourcePredictionWednesdaySchedule>[]>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionFridaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionMondaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionSaturdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionSundaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionThursdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionTuesdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatefulAgentManualResourcePredictionWednesdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgent {
        /**
         * An `automaticResourcePrediction` block as defined below.
         */
        automaticResourcePrediction?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentAutomaticResourcePrediction>;
        /**
         * A `manualResourcePrediction` block as defined below.
         *
         * > **Note:** Exactly one of `manualResourcePrediction` or `automaticResourcePrediction` may be specified.
         */
        manualResourcePrediction?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePrediction>;
    }
    interface ManagedDevOpsPoolStatelessAgentAutomaticResourcePrediction {
        /**
         * Specifies the desired balance between cost and performance. Possible values are `MostCostEffective`, `MoreCostEffective`, `Balanced`, `MorePerformance`, and `BestPerformance`. Defaults to `Balanced`.
         */
        predictionPreference?: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePrediction {
        /**
         * A number of agents available 24/7 all week. Possible values range between `1` and `maximumConcurrency`.
         */
        allWeekSchedule?: pulumi.Input<number>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        fridaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionFridaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        mondaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionMondaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        saturdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionSaturdaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        sundaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionSundaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        thursdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionThursdaySchedule>[]>;
        /**
         * Specifies the time zone for the predictions data to be provisioned at. Defaults to `UTC`.
         *
         * > **Note:** A list of possible values for `timeZoneName` are available by executing `[System.TimeZoneInfo]::GetSystemTimeZones()` in PowerShell.
         */
        timeZoneName?: pulumi.Input<string>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         */
        tuesdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionTuesdaySchedule>[]>;
        /**
         * One or more `dailySchedule` blocks as defined below.
         *
         * > **Note:** Exactly one of `allWeekSchedule` or at least one individual daily schedule block must be specified.
         *
         * > **Note:** Please refer to [Microsoft documentation](https://learn.microsoft.com/azure/devops/managed-devops-pools/configure-scaling?view=azure-devops&tabs=azure-cli#manual) for more information about the manual predictions setup.
         */
        wednesdaySchedules?: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolStatelessAgentManualResourcePredictionWednesdaySchedule>[]>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionFridaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionMondaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionSaturdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionSundaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionThursdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionTuesdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolStatelessAgentManualResourcePredictionWednesdaySchedule {
        /**
         * The number of standby agents to provision at this time. Possible values range between `0` and `maximumConcurrency`.
         */
        count: pulumi.Input<number>;
        /**
         * The time of day at which the agent count changes, in 24-hour format `HH:MM:SS`.
         */
        time: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolVirtualMachineScaleSetFabric {
        /**
         * One or more `image` blocks as defined below.
         */
        images: pulumi.Input<pulumi.Input<inputs.devcenter.ManagedDevOpsPoolVirtualMachineScaleSetFabricImage>[]>;
        /**
         * The storage account type for the OS disk. Possible values are `Premium`, `Standard`, and `StandardSSD`. Defaults to `Standard`.
         */
        osDiskStorageAccountType?: pulumi.Input<string>;
        /**
         * A `security` block as defined below.
         */
        security?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolVirtualMachineScaleSetFabricSecurity>;
        /**
         * The Azure SKU name of the machines in the pool.
         *
         * > **Note:** Please refer to the [Microsoft Documentation](https://learn.microsoft.com/azure/devops/managed-devops-pools/configure-pool-settings?view=azure-devops&tabs=azure-portal#agent-size) for more information about available SKUs.
         */
        skuName: pulumi.Input<string>;
        /**
         * A `storage` block as defined below.
         */
        storage?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolVirtualMachineScaleSetFabricStorage>;
        /**
         * The subnet ID on which to put all machines created in the pool.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolVirtualMachineScaleSetFabricImage {
        /**
         * List of aliases to reference the image by.
         */
        aliases?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The percentage of the buffer to be allocated to this image. Possible values are `*` or between `0` and `100`. Defaults to `*`.
         */
        buffer?: pulumi.Input<string>;
        /**
         * The resource id of the image.
         */
        id?: pulumi.Input<string>;
        /**
         * The image to use from a well-known set of images made available to customers.
         *
         * > **Note:** More information about supported images can be found in [list of Azure Pipelines image predefined aliases](https://learn.microsoft.com/azure/devops/managed-devops-pools/configure-images?view=azure-devops&tabs=arm#azure-pipelines-images). You can optionally specify a version in your `wellKnownImageName`, for example `windows-2022/latest` or `windows-2022/20250427.1.0`. If you don't specify a version, latest is used.
         *
         * > **Note:** Exactly one of `id` or `wellKnownImageName` are required per `image`
         */
        wellKnownImageName?: pulumi.Input<string>;
    }
    interface ManagedDevOpsPoolVirtualMachineScaleSetFabricSecurity {
        /**
         * Specifies whether the agent should run in interactive mode. Defaults to `false`.
         */
        interactiveLogonEnabled?: pulumi.Input<boolean>;
        /**
         * A `keyVaultManagement` block as defined below.
         */
        keyVaultManagement?: pulumi.Input<inputs.devcenter.ManagedDevOpsPoolVirtualMachineScaleSetFabricSecurityKeyVaultManagement>;
    }
    interface ManagedDevOpsPoolVirtualMachineScaleSetFabricSecurityKeyVaultManagement {
        /**
         * Specifies where to store certificates on the machine.
         */
        certificateStoreLocation?: pulumi.Input<string>;
        /**
         * Name of the certificate store to use on the machine. Possible values are `My` and `Root`.
         */
        certificateStoreName?: pulumi.Input<string>;
        /**
         * Defines if the key of the certificates should be exportable. Defaults to `false`.
         */
        keyExportEnabled?: pulumi.Input<boolean>;
        /**
         * A list of `versionlessId` from Azure Key vault certificates to install on all machines in the pool.
         */
        keyVaultCertificateIds: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ManagedDevOpsPoolVirtualMachineScaleSetFabricStorage {
        /**
         * The type of caching for the data disk. Possible values are `ReadOnly` and `ReadWrite`.
         */
        caching?: pulumi.Input<string>;
        /**
         * The initial disk size in gigabytes. Possible values range between `1` and `32767`.
         */
        diskSizeInGb: pulumi.Input<number>;
        /**
         * The drive letter for the data disk.
         */
        driveLetter?: pulumi.Input<string>;
        /**
         * The storage account type of the data disk. Possible values are `Premium_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, and `StandardSSD_ZRS`. Defaults to `Standard_LRS`.
         */
        storageAccountType?: pulumi.Input<string>;
    }
    interface ProjectEnvironmentTypeIdentity {
        /**
         * The ID of the User Assigned Identity which should be assigned to this Dev Center Project Environment Type.
         *
         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for this Dev Center Project Environment Type. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ProjectEnvironmentTypeUserRoleAssignment {
        /**
         * A list of roles to assign to the `userId`.
         */
        roles: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The user object ID that is assigned roles.
         */
        userId: pulumi.Input<string>;
    }
    interface ProjectIdentity {
        /**
         * The ID of the User Assigned Identity which should be assigned to this Dev Center Project.
         *
         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Dev Center Project.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Dev Center Project.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for this Dev Center Project. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace devtest {
    interface GlobalVMShutdownScheduleNotificationSettings {
        /**
         * E-mail address to which the notification will be sent.
         */
        email?: pulumi.Input<string>;
        /**
         * Whether to enable pre-shutdown notifications. Possible values are `true` and `false`.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Time in minutes between 15 and 120 before a shutdown event at which a notification will be sent. Defaults to `30`.
         */
        timeInMinutes?: pulumi.Input<number>;
        /**
         * The webhook URL to which the notification will be sent.
         */
        webhookUrl?: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineGalleryImageReference {
        /**
         * The Offer of the Gallery Image. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The Publisher of the Gallery Image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Gallery Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * The Version of the Gallery Image. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface LinuxVirtualMachineInboundNatRule {
        /**
         * The Backend Port associated with this NAT Rule. Changing this forces a new resource to be created.
         */
        backendPort: pulumi.Input<number>;
        /**
         * The frontend port associated with this Inbound NAT Rule.
         */
        frontendPort?: pulumi.Input<number>;
        /**
         * The Protocol used for this NAT Rule. Possible values are `Tcp` and `Udp`.
         */
        protocol: pulumi.Input<string>;
    }
    interface ScheduleDailyRecurrence {
        /**
         * The time each day when the schedule takes effect.
         */
        time: pulumi.Input<string>;
    }
    interface ScheduleHourlyRecurrence {
        /**
         * Minutes of the hour the schedule will run.
         */
        minute: pulumi.Input<number>;
    }
    interface ScheduleNotificationSettings {
        /**
         * The status of the notification. Possible values are `Enabled` and `Disabled`. Defaults to `Disabled`
         */
        status?: pulumi.Input<string>;
        /**
         * Time in minutes before event at which notification will be sent.
         */
        timeInMinutes?: pulumi.Input<number>;
        /**
         * The webhook URL to which the notification will be sent.
         */
        webhookUrl?: pulumi.Input<string>;
    }
    interface ScheduleWeeklyRecurrence {
        /**
         * The time when the schedule takes effect.
         */
        time: pulumi.Input<string>;
        /**
         * A list of days that this schedule takes effect . Possible values include `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        weekDays?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkSubnet {
        /**
         * Specifies the name of the Dev Test Virtual Network. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * A `sharedPublicIpAddress` block as defined below.
         */
        sharedPublicIpAddress?: pulumi.Input<inputs.devtest.VirtualNetworkSubnetSharedPublicIpAddress>;
        /**
         * Can this subnet be used for creating Virtual Machines? Possible values are `Allow`, `Default` and `Deny`. Defaults to `Allow`.
         */
        useInVirtualMachineCreation?: pulumi.Input<string>;
        /**
         * Can Virtual Machines in this Subnet use Public IP Addresses? Possible values are `Allow`, `Default` and `Deny`. Defaults to `Allow`.
         */
        usePublicIpAddress?: pulumi.Input<string>;
    }
    interface VirtualNetworkSubnetSharedPublicIpAddress {
        /**
         * A list of `allowedPorts` blocks as defined below.
         */
        allowedPorts?: pulumi.Input<pulumi.Input<inputs.devtest.VirtualNetworkSubnetSharedPublicIpAddressAllowedPort>[]>;
    }
    interface VirtualNetworkSubnetSharedPublicIpAddressAllowedPort {
        /**
         * The port on the Virtual Machine that the traffic will be sent to.
         */
        backendPort?: pulumi.Input<number>;
        /**
         * The transport protocol that the traffic will use. Possible values are `TCP` and `UDP`.
         */
        transportProtocol?: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineGalleryImageReference {
        /**
         * The Offer of the Gallery Image. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The Publisher of the Gallery Image. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Gallery Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * The Version of the Gallery Image. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface WindowsVirtualMachineInboundNatRule {
        /**
         * The Backend Port associated with this NAT Rule. Changing this forces a new resource to be created.
         */
        backendPort: pulumi.Input<number>;
        /**
         * The frontend port associated with this Inbound NAT Rule.
         */
        frontendPort?: pulumi.Input<number>;
        /**
         * The Protocol used for this NAT Rule. Possible values are `Tcp` and `Udp`.
         */
        protocol: pulumi.Input<string>;
    }
}
export declare namespace digitaltwins {
    interface InstanceIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Digital Twins instance.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Digital Twins instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace dns {
    interface CaaRecordRecord {
        /**
         * Extensible CAA flags, currently only 1 is implemented to set the issuer critical flag.
         */
        flags: pulumi.Input<number>;
        /**
         * A property tag, options are `issue`, `issuewild`, `iodef`, and `contactemail`.
         */
        tag: pulumi.Input<string>;
        /**
         * A property value such as a registrar domain.
         */
        value: pulumi.Input<string>;
    }
    interface MxRecordRecord {
        /**
         * The mail server responsible for the domain covered by the MX record.
         */
        exchange: pulumi.Input<string>;
        /**
         * String representing the "preference” value of the MX records. Records with lower preference value take priority.
         */
        preference: pulumi.Input<string>;
    }
    interface SrvRecordRecord {
        /**
         * Port the service is listening on.
         */
        port: pulumi.Input<number>;
        /**
         * Priority of the SRV record.
         */
        priority: pulumi.Input<number>;
        /**
         * FQDN of the service.
         */
        target: pulumi.Input<string>;
        /**
         * Weight of the SRV record.
         */
        weight: pulumi.Input<number>;
    }
    interface TxtRecordRecord {
        /**
         * The value of the record. Max length: 4096 characters
         */
        value: pulumi.Input<string>;
    }
    interface ZoneSoaRecord {
        /**
         * The email contact for the SOA record.
         */
        email: pulumi.Input<string>;
        /**
         * The expire time for the SOA record. Defaults to `2419200`.
         */
        expireTime?: pulumi.Input<number>;
        /**
         * The fully qualified domain name.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * The domain name of the authoritative name server for the SOA record.
         */
        hostName?: pulumi.Input<string>;
        /**
         * The minimum Time To Live for the SOA record. By convention, it is used to determine the negative caching duration. Defaults to `300`.
         */
        minimumTtl?: pulumi.Input<number>;
        /**
         * The refresh time for the SOA record. Defaults to `3600`.
         */
        refreshTime?: pulumi.Input<number>;
        /**
         * The retry time for the SOA record. Defaults to `300`.
         */
        retryTime?: pulumi.Input<number>;
        /**
         * The serial number for the SOA record. Defaults to `1`.
         */
        serialNumber?: pulumi.Input<number>;
        /**
         * A mapping of tags to assign to the Record Set.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Time To Live of the SOA Record in seconds. Defaults to `3600`.
         */
        ttl?: pulumi.Input<number>;
    }
}
export declare namespace domainservices {
    interface ServiceInitialReplicaSet {
        /**
         * A list of subnet IP addresses for the domain controllers in the initial replica set, typically two.
         */
        domainControllerIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The publicly routable IP address for the domain controllers in the initial replica set.
         */
        externalAccessIpAddress?: pulumi.Input<string>;
        /**
         * A unique ID for the replica set.
         */
        id?: pulumi.Input<string>;
        /**
         * The Azure location where the Domain Service exists. Changing this forces a new resource to be created.
         */
        location?: pulumi.Input<string>;
        /**
         * The current service status for the initial replica set.
         */
        serviceStatus?: pulumi.Input<string>;
        /**
         * The ID of the subnet in which to place the initial replica set. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ServiceNotifications {
        /**
         * A list of additional email addresses to notify when there are alerts in the managed domain.
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether to notify members of the _AAD DC Administrators_ group when there are alerts in the managed domain.
         */
        notifyDcAdmins?: pulumi.Input<boolean>;
        /**
         * Whether to notify all Global Administrators when there are alerts in the managed domain.
         */
        notifyGlobalAdmins?: pulumi.Input<boolean>;
    }
    interface ServiceSecureLdap {
        /**
         * The expiry time of the certificate.
         */
        certificateExpiry?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        certificateThumbprint?: pulumi.Input<string>;
        /**
         * Whether to enable secure LDAP for the managed domain. For more information, please see [official documentation on enabling LDAPS](https://docs.microsoft.com/azure/active-directory-domain-services/tutorial-configure-ldaps), paying particular attention to the section on network security to avoid unnecessarily exposing your service to Internet-borne bruteforce attacks.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Whether to enable external access to LDAPS over the Internet. Defaults to `false`.
         */
        externalAccessEnabled?: pulumi.Input<boolean>;
        /**
         * The certificate/private key to use for LDAPS, as a base64-encoded TripleDES-SHA1 encrypted PKCS#12 bundle (PFX file).
         */
        pfxCertificate: pulumi.Input<string>;
        /**
         * The password to use for decrypting the PKCS#12 bundle (PFX file).
         */
        pfxCertificatePassword: pulumi.Input<string>;
        /**
         * The public certificate.
         */
        publicCertificate?: pulumi.Input<string>;
    }
    interface ServiceSecurity {
        /**
         * Whether to enable Kerberos Armoring. Defaults to `false`.
         */
        kerberosArmoringEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable Kerberos RC4 Encryption. Defaults to `false`.
         */
        kerberosRc4EncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable legacy NTLM v1 support. Defaults to `false`.
         */
        ntlmV1Enabled?: pulumi.Input<boolean>;
        /**
         * Whether to synchronize Kerberos password hashes to the managed domain. Defaults to `false`.
         */
        syncKerberosPasswords?: pulumi.Input<boolean>;
        /**
         * Whether to synchronize NTLM password hashes to the managed domain. Defaults to `false`.
         */
        syncNtlmPasswords?: pulumi.Input<boolean>;
        /**
         * Whether to synchronize on-premises password hashes to the managed domain. Defaults to `false`.
         */
        syncOnPremPasswords?: pulumi.Input<boolean>;
        /**
         * Whether to enable legacy TLS v1 support. Defaults to `false`.
         */
        tlsV1Enabled?: pulumi.Input<boolean>;
    }
}
export declare namespace dynatrace {
    interface MonitorEnvironmentProperty {
        /**
         * Information about the Dynatrace environment. An `environmentInfo` block as defined below.
         */
        environmentInfos: pulumi.Input<pulumi.Input<inputs.dynatrace.MonitorEnvironmentPropertyEnvironmentInfo>[]>;
    }
    interface MonitorEnvironmentPropertyEnvironmentInfo {
        /**
         * The ID of the Dynatrace environment to be created.
         */
        environmentId: pulumi.Input<string>;
    }
    interface MonitorIdentity {
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for the resource. Only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface MonitorPlan {
        /**
         * Different billing cycles. Possible values are `MONTHLY`, `WEEKLY` and `YEARLY`.
         */
        billingCycle?: pulumi.Input<string>;
        /**
         * Date when plan was applied.
         */
        effectiveDate?: pulumi.Input<string>;
        /**
         * Plan id as published by Dynatrace.
         */
        plan: pulumi.Input<string>;
        /**
         * Different usage type. Possible values are `PAYG` and `COMMITTED`.
         */
        usageType?: pulumi.Input<string>;
    }
    interface MonitorUser {
        /**
         * Country of the user.
         */
        country?: pulumi.Input<string>;
        /**
         * Email of the user used by Dynatrace for contacting them if needed.
         */
        email: pulumi.Input<string>;
        /**
         * First name of the user.
         */
        firstName: pulumi.Input<string>;
        /**
         * Last name of the user.
         */
        lastName: pulumi.Input<string>;
        /**
         * phone number of the user by Dynatrace for contacting them if needed.
         */
        phoneNumber?: pulumi.Input<string>;
    }
    interface TagRulesLogRule {
        /**
         * Filtering tag for the log rule. A `filteringTag` block as defined below.
         */
        filteringTags?: pulumi.Input<pulumi.Input<inputs.dynatrace.TagRulesLogRuleFilteringTag>[]>;
        /**
         * Send Activity logs. The default value is `false`.
         */
        sendActivityLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Send Azure Active Directory logs. The default value is `false`.
         */
        sendAzureActiveDirectoryLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Send Subscription logs. The default value is `false`.
         */
        sendSubscriptionLogsEnabled?: pulumi.Input<boolean>;
    }
    interface TagRulesLogRuleFilteringTag {
        /**
         * Action of the filtering tag. Possible values are `Include` and `Exclude`.
         */
        action: pulumi.Input<string>;
        /**
         * Name of the filtering tag.
         */
        name: pulumi.Input<string>;
        /**
         * Value of the filtering tag.
         */
        value: pulumi.Input<string>;
    }
    interface TagRulesMetricRule {
        /**
         * Filtering tag for the metric rule. A `filteringTag` block as defined below.
         */
        filteringTags?: pulumi.Input<pulumi.Input<inputs.dynatrace.TagRulesMetricRuleFilteringTag>[]>;
        /**
         * If sending metrics is enabled. The default value is `false`.
         */
        sendingMetricsEnabled?: pulumi.Input<boolean>;
    }
    interface TagRulesMetricRuleFilteringTag {
        /**
         * Action of the filtering tag. Possible values are `Include` and `Exclude`.
         */
        action: pulumi.Input<string>;
        /**
         * Name of the filtering tag.
         */
        name: pulumi.Input<string>;
        /**
         * Value of the filtering tag.
         */
        value: pulumi.Input<string>;
    }
}
export declare namespace elasticcloud {
    interface ElasticsearchLogs {
        /**
         * A list of `filteringTag` blocks as defined above.
         */
        filteringTags?: pulumi.Input<pulumi.Input<inputs.elasticcloud.ElasticsearchLogsFilteringTag>[]>;
        /**
         * Specifies if the Azure Activity Logs should be sent to the Elasticsearch cluster. Defaults to `false`.
         */
        sendActivityLogs?: pulumi.Input<boolean>;
        /**
         * Specifies if the AzureAD Logs should be sent to the Elasticsearch cluster. Defaults to `false`.
         */
        sendAzureadLogs?: pulumi.Input<boolean>;
        /**
         * Specifies if the Azure Subscription Logs should be sent to the Elasticsearch cluster. Defaults to `false`.
         */
        sendSubscriptionLogs?: pulumi.Input<boolean>;
    }
    interface ElasticsearchLogsFilteringTag {
        /**
         * Specifies the type of action which should be taken when the Tag matches the `name` and `value`. Possible values are `Exclude` and `Include`.
         */
        action: pulumi.Input<string>;
        /**
         * Specifies the name (key) of the Tag which should be filtered.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the Tag which should be filtered.
         */
        value: pulumi.Input<string>;
    }
    interface GetElasticsearchLog {
        /**
         * A list of `filteringTag` blocks as defined above.
         */
        filteringTags?: inputs.elasticcloud.GetElasticsearchLogFilteringTag[];
        /**
         * Should the Azure Activity Logs should be sent to the Elasticsearch cluster?
         */
        sendActivityLogs?: boolean;
        /**
         * Should the AzureAD Logs should be sent to the Elasticsearch cluster?
         */
        sendAzureadLogs?: boolean;
        /**
         * Should the Azure Subscription Logs should be sent to the Elasticsearch cluster?
         */
        sendSubscriptionLogs?: boolean;
    }
    interface GetElasticsearchLogArgs {
        /**
         * A list of `filteringTag` blocks as defined above.
         */
        filteringTags?: pulumi.Input<pulumi.Input<inputs.elasticcloud.GetElasticsearchLogFilteringTagArgs>[]>;
        /**
         * Should the Azure Activity Logs should be sent to the Elasticsearch cluster?
         */
        sendActivityLogs?: pulumi.Input<boolean>;
        /**
         * Should the AzureAD Logs should be sent to the Elasticsearch cluster?
         */
        sendAzureadLogs?: pulumi.Input<boolean>;
        /**
         * Should the Azure Subscription Logs should be sent to the Elasticsearch cluster?
         */
        sendSubscriptionLogs?: pulumi.Input<boolean>;
    }
    interface GetElasticsearchLogFilteringTag {
        /**
         * The type of action which is taken when the Tag matches the `name` and `value`.
         */
        action?: string;
        /**
         * The name of the Elasticsearch resource.
         */
        name?: string;
        /**
         * The value of the Tag which should be filtered.
         */
        value?: string;
    }
    interface GetElasticsearchLogFilteringTagArgs {
        /**
         * The type of action which is taken when the Tag matches the `name` and `value`.
         */
        action?: pulumi.Input<string>;
        /**
         * The name of the Elasticsearch resource.
         */
        name?: pulumi.Input<string>;
        /**
         * The value of the Tag which should be filtered.
         */
        value?: pulumi.Input<string>;
    }
}
export declare namespace elasticsan {
    interface ElasticSanSku {
        /**
         * The SKU name. Possible values are `Premium_LRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         *
         * > **Note:** `Premium_ZRS` SKU is only available in limited Azure regions including `France Central`, `North Europe`, `West Europe`, and `West US 2`. Please refer to this [document](https://azure.microsoft.com/updates/regional-expansion-azure-elastic-san-public-preview-is-now-available-in-more-regions) for more details.
         */
        name: pulumi.Input<string>;
        /**
         * The SKU tier. The only possible value is `Premium`. Defaults to `Premium`.
         */
        tier?: pulumi.Input<string>;
    }
    interface VolumeCreateSource {
        /**
         * Specifies the ID of the source to create the Elastic SAN Volume from. Changing this forces a new resource to be created.
         */
        sourceId: pulumi.Input<string>;
        /**
         * Specifies the type of the source to create the Elastic SAN Volume from. Possible values are `Disk`, `DiskRestorePoint`, `DiskSnapshot` and `VolumeSnapshot`. Changing this forces a new resource to be created.
         */
        sourceType: pulumi.Input<string>;
    }
    interface VolumeGroupEncryption {
        /**
         * The timestamp of the expiration time for the current version of the customer managed key.
         */
        currentVersionedKeyExpirationTimestamp?: pulumi.Input<string>;
        /**
         * The ID of the current versioned Key Vault Key in use.
         */
        currentVersionedKeyId?: pulumi.Input<string>;
        /**
         * The Key Vault key URI for Customer Managed Key encryption, which can be either a full URI or a versionless URI.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The timestamp of the last rotation of the Key Vault Key.
         */
        lastKeyRotationTimestamp?: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity used by this Elastic SAN Volume Group.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface VolumeGroupIdentity {
        /**
         * A list of the User Assigned Identity IDs that should be assigned to this Elastic SAN Volume Group.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with the Managed Service Identity assigned to this Elastic SAN Volume Group.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity assigned to this Elastic SAN Volume Group.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Identity that should be assigned to this Elastic SAN Volume Group. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface VolumeGroupNetworkRule {
        /**
         * The action to take when the Subnet attempts to access this Elastic SAN Volume Group. The only possible value is `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The ID of the Subnet which should be allowed to access this Elastic SAN Volume Group.
         */
        subnetId: pulumi.Input<string>;
    }
}
export declare namespace eventgrid {
    interface DomainIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid Domain.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Event Grid Domain has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid Domain. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface DomainInboundIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface DomainInputMappingDefaultValues {
        /**
         * Specifies the default data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the default event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the default subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
    }
    interface DomainInputMappingFields {
        /**
         * Specifies the data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the event time of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventTime?: pulumi.Input<string>;
        /**
         * Specifies the event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the id of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
        /**
         * Specifies the topic of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        topic?: pulumi.Input<string>;
    }
    interface EventSubscriptionAdvancedFilter {
        /**
         * Compares a value of an event using a single boolean value.
         */
        boolEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterBoolEqual>[]>;
        /**
         * Evaluates if a value of an event isn't NULL or undefined.
         */
        isNotNulls?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterIsNotNull>[]>;
        /**
         * Evaluates if a value of an event is NULL or undefined.
         *
         * Each nested block consists of a key and a value(s) element.
         */
        isNullOrUndefineds?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterIsNullOrUndefined>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThans?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberGreaterThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberInRanges?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberIn>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberLessThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThans?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberLessThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberNotInRanges?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberNotInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberNotIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterNumberNotIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringContains?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringNotBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotContains?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringNotContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringNotEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.EventSubscriptionAdvancedFilterStringNotIn>[]>;
    }
    interface EventSubscriptionAdvancedFilterBoolEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<boolean>;
    }
    interface EventSubscriptionAdvancedFilterIsNotNull {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface EventSubscriptionAdvancedFilterIsNullOrUndefined {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface EventSubscriptionAdvancedFilterNumberGreaterThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberLessThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberLessThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberNotInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAzureFunctionEndpoint {
        /**
         * Specifies the ID of the Function where the Event Subscription will receive events. This must be the functions ID in format {function_app.id}/functions/{name}.
         */
        functionId: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
    }
    interface EventSubscriptionDeadLetterIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for dead lettering. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface EventSubscriptionDeliveryIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for event delivery. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface EventSubscriptionDeliveryProperty {
        /**
         * The name of the header to send on to the destination
         */
        headerName: pulumi.Input<string>;
        /**
         * True if the `value` is a secret and should be protected, otherwise false. If True, then this value won't be returned from Azure API calls
         */
        secret?: pulumi.Input<boolean>;
        /**
         * If the `type` is `Dynamic`, then provide the payload field to be used as the value. Valid source fields differ by subscription type.
         */
        sourceField?: pulumi.Input<string>;
        /**
         * Either `Static` or `Dynamic`
         */
        type: pulumi.Input<string>;
        /**
         * If the `type` is `Static`, then provide the value to use
         */
        value?: pulumi.Input<string>;
    }
    interface EventSubscriptionRetryPolicy {
        /**
         * Specifies the time to live (in minutes) for events. Supported range is `1` to `1440`. See [official documentation](https://docs.microsoft.com/azure/event-grid/manage-event-delivery#set-retry-policy) for more details.
         */
        eventTimeToLive: pulumi.Input<number>;
        /**
         * Specifies the maximum number of delivery retry attempts for events.
         */
        maxDeliveryAttempts: pulumi.Input<number>;
    }
    interface EventSubscriptionStorageBlobDeadLetterDestination {
        /**
         * Specifies the id of the storage account id where the storage blob is located.
         */
        storageAccountId: pulumi.Input<string>;
        /**
         * Specifies the name of the Storage blob container that is the destination of the deadletter events.
         */
        storageBlobContainerName: pulumi.Input<string>;
    }
    interface EventSubscriptionStorageQueueEndpoint {
        /**
         * Storage queue message time to live in seconds.
         */
        queueMessageTimeToLiveInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the name of the storage queue where the Event Subscription will receive events.
         */
        queueName: pulumi.Input<string>;
        /**
         * Specifies the id of the storage account id where the storage queue is located.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface EventSubscriptionSubjectFilter {
        /**
         * Specifies if `subjectBeginsWith` and `subjectEndsWith` case sensitive. This value
         */
        caseSensitive?: pulumi.Input<boolean>;
        /**
         * A string to filter events for an event subscription based on a resource path prefix.
         */
        subjectBeginsWith?: pulumi.Input<string>;
        /**
         * A string to filter events for an event subscription based on a resource path suffix.
         */
        subjectEndsWith?: pulumi.Input<string>;
    }
    interface EventSubscriptionWebhookEndpoint {
        /**
         * The Azure Active Directory Application ID or URI to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryAppIdOrUri?: pulumi.Input<string>;
        /**
         * The Azure Active Directory Tenant ID to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryTenantId?: pulumi.Input<string>;
        /**
         * The base url of the webhook where the Event Subscription will receive events.
         */
        baseUrl?: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
        /**
         * Specifies the url of the webhook where the Event Subscription will receive events.
         */
        url: pulumi.Input<string>;
    }
    interface NamespaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid Namespace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid Namespace. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface NamespaceInboundIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface NamespaceTopicSpacesConfiguration {
        /**
         * Specifies a list of alternative sources for the client authentication name from the client certificate. Possible values are `ClientCertificateDns`, `ClientCertificateEmail`, `ClientCertificateIp`, `ClientCertificateSubject` and `ClientCertificateUri`.
         */
        alternativeAuthenticationNameSources?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `dynamicRoutingEnrichment` blocks as defined below.
         */
        dynamicRoutingEnrichments?: pulumi.Input<pulumi.Input<inputs.eventgrid.NamespaceTopicSpacesConfigurationDynamicRoutingEnrichment>[]>;
        /**
         * Specifies the maximum number of client sessions per authentication name. Valid values can be between `1` and `100`.
         */
        maximumClientSessionsPerAuthenticationName?: pulumi.Input<number>;
        /**
         * Specifies the maximum session expiry interval allowed for all MQTT clients connecting to the Event Grid namespace. Valid values can be between `1` and `8`.
         */
        maximumSessionExpiryInHours?: pulumi.Input<number>;
        /**
         * Specifies the Event Grid topic resource ID to route messages to.
         */
        routeTopicId?: pulumi.Input<string>;
        /**
         * One or more `staticRoutingEnrichment` blocks as defined below.
         */
        staticRoutingEnrichments?: pulumi.Input<pulumi.Input<inputs.eventgrid.NamespaceTopicSpacesConfigurationStaticRoutingEnrichment>[]>;
    }
    interface NamespaceTopicSpacesConfigurationDynamicRoutingEnrichment {
        /**
         * The enrichment key.
         */
        key: pulumi.Input<string>;
        /**
         * The enrichment value.
         */
        value: pulumi.Input<string>;
    }
    interface NamespaceTopicSpacesConfigurationStaticRoutingEnrichment {
        /**
         * The enrichment key.
         */
        key: pulumi.Input<string>;
        /**
         * The enrichment value.
         */
        value: pulumi.Input<string>;
    }
    interface PartnerConfigurationPartnerAuthorization {
        /**
         * Expiration time of the partner authorization. Value should be in RFC 3339 format in UTC time zone, for example: "2025-02-04T00:00:00Z".
         *
         * > **Note:** If the time from `authorizationExpirationTimeInUtc` expires, any request from this partner to create, update or delete resources in the subscriber's context will fail. If not specified, the authorization will expire after `defaultMaximumExpirationTimeInDays`.
         */
        authorizationExpirationTimeInUtc?: pulumi.Input<string>;
        /**
         * The partner name.
         */
        partnerName: pulumi.Input<string>;
        /**
         * The immutable id of the corresponding partner registration.
         */
        partnerRegistrationId: pulumi.Input<string>;
    }
    interface PartnerNamespaceInboundIpRule {
        /**
         * The action to take when the rule is matched. The only possible value is `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilter {
        /**
         * Compares a value of an event using a single boolean value.
         */
        boolEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterBoolEqual>[]>;
        /**
         * Evaluates if a value of an event isn't NULL or undefined.
         */
        isNotNulls?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterIsNotNull>[]>;
        /**
         * Evaluates if a value of an event is NULL or undefined.
         *
         * Each nested block consists of a key and a value(s) element.
         */
        isNullOrUndefineds?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterIsNullOrUndefined>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThans?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberInRanges?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberIn>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberLessThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThans?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberLessThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberNotInRanges?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberNotInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberNotIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterNumberNotIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringContains?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringNotBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotContains?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringNotContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringNotEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotIns?: pulumi.Input<pulumi.Input<inputs.eventgrid.SystemTopicEventSubscriptionAdvancedFilterStringNotIn>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterBoolEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<boolean>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterIsNotNull {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterIsNullOrUndefined {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberLessThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberLessThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterNumberNotInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringNotBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringNotContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringNotEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAdvancedFilterStringNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SystemTopicEventSubscriptionAzureFunctionEndpoint {
        /**
         * Specifies the ID of the Function where the Event Subscription will receive events. This must be the functions ID in format {function_app.id}/functions/{name}.
         */
        functionId: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionDeadLetterIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for dead lettering. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionDeliveryIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for event delivery. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionDeliveryProperty {
        /**
         * The name of the header to send on to the destination.
         */
        headerName: pulumi.Input<string>;
        /**
         * Set to `true` if the `value` is a secret and should be protected, otherwise `false`. If `true` then this value won't be returned from Azure API calls.
         */
        secret?: pulumi.Input<boolean>;
        /**
         * If the `type` is `Dynamic`, then provide the payload field to be used as the value. Valid source fields differ by subscription type.
         */
        sourceField?: pulumi.Input<string>;
        /**
         * Either `Static` or `Dynamic`.
         */
        type: pulumi.Input<string>;
        /**
         * If the `type` is `Static`, then provide the value to use.
         */
        value?: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionRetryPolicy {
        /**
         * Specifies the time to live (in minutes) for events. Supported range is `1` to `1440`. See [official documentation](https://docs.microsoft.com/azure/event-grid/manage-event-delivery#set-retry-policy) for more details.
         */
        eventTimeToLive: pulumi.Input<number>;
        /**
         * Specifies the maximum number of delivery retry attempts for events.
         */
        maxDeliveryAttempts: pulumi.Input<number>;
    }
    interface SystemTopicEventSubscriptionStorageBlobDeadLetterDestination {
        /**
         * Specifies the id of the storage account id where the storage blob is located.
         */
        storageAccountId: pulumi.Input<string>;
        /**
         * Specifies the name of the Storage blob container that is the destination of the deadletter events.
         */
        storageBlobContainerName: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionStorageQueueEndpoint {
        /**
         * Storage queue message time to live in seconds.
         */
        queueMessageTimeToLiveInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the name of the storage queue where the Event Subscription will receive events.
         */
        queueName: pulumi.Input<string>;
        /**
         * Specifies the id of the storage account id where the storage queue is located.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionSubjectFilter {
        /**
         * Specifies if `subjectBeginsWith` and `subjectEndsWith` case sensitive. This value
         */
        caseSensitive?: pulumi.Input<boolean>;
        /**
         * A string to filter events for an event subscription based on a resource path prefix.
         */
        subjectBeginsWith?: pulumi.Input<string>;
        /**
         * A string to filter events for an event subscription based on a resource path suffix.
         */
        subjectEndsWith?: pulumi.Input<string>;
    }
    interface SystemTopicEventSubscriptionWebhookEndpoint {
        /**
         * The Azure Active Directory Application ID or URI to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryAppIdOrUri?: pulumi.Input<string>;
        /**
         * The Azure Active Directory Tenant ID to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryTenantId?: pulumi.Input<string>;
        /**
         * The base url of the webhook where the Event Subscription will receive events.
         */
        baseUrl?: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
        /**
         * Specifies the url of the webhook where the Event Subscription will receive events.
         */
        url: pulumi.Input<string>;
    }
    interface SystemTopicIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid System Topic.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Event Grid System Topic has been created.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid System Topic. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface TopicIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid Topic.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Event Grid Topic has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid Topic. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface TopicInboundIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface TopicInputMappingDefaultValues {
        /**
         * Specifies the default data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the default event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the default subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
    }
    interface TopicInputMappingFields {
        /**
         * Specifies the data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the event time of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventTime?: pulumi.Input<string>;
        /**
         * Specifies the event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the id of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
        /**
         * Specifies the topic of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        topic?: pulumi.Input<string>;
    }
}
export declare namespace eventhub {
    interface DomainIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid Domain.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Event Grid Domain has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid Domain. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface DomainInboundIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface DomainInputMappingDefaultValues {
        /**
         * Specifies the default data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the default event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the default subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
    }
    interface DomainInputMappingFields {
        /**
         * Specifies the data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the event time of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventTime?: pulumi.Input<string>;
        /**
         * Specifies the event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the id of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
        /**
         * Specifies the topic of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        topic?: pulumi.Input<string>;
    }
    interface EventGridTopicIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Event Grid Topic.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Event Grid Topic has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Grid Topic. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface EventGridTopicInboundIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask (CIDR) to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface EventGridTopicInputMappingDefaultValues {
        /**
         * Specifies the default data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the default event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the default subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
    }
    interface EventGridTopicInputMappingFields {
        /**
         * Specifies the data version of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        dataVersion?: pulumi.Input<string>;
        /**
         * Specifies the event time of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventTime?: pulumi.Input<string>;
        /**
         * Specifies the event type of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        eventType?: pulumi.Input<string>;
        /**
         * Specifies the id of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the subject of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        subject?: pulumi.Input<string>;
        /**
         * Specifies the topic of the EventGrid Event to associate with the domain. Changing this forces a new resource to be created.
         */
        topic?: pulumi.Input<string>;
    }
    interface EventHubCaptureDescription {
        /**
         * A `destination` block as defined below.
         */
        destination: pulumi.Input<inputs.eventhub.EventHubCaptureDescriptionDestination>;
        /**
         * Specifies if the Capture Description is Enabled.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * Specifies the Encoding used for the Capture Description. Possible values are `Avro` and `AvroDeflate`.
         */
        encoding: pulumi.Input<string>;
        /**
         * Specifies the time interval in seconds at which the capture will happen. Values can be between `60` and `900` seconds. Defaults to `300` seconds.
         */
        intervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the amount of data built up in your EventHub before a Capture Operation occurs. Value should be between `10485760` and `524288000` bytes. Defaults to `314572800` bytes.
         */
        sizeLimitInBytes?: pulumi.Input<number>;
        /**
         * Specifies if empty files should not be emitted if no events occur during the Capture time window. Defaults to `false`.
         */
        skipEmptyArchives?: pulumi.Input<boolean>;
    }
    interface EventHubCaptureDescriptionDestination {
        /**
         * The Blob naming convention for archiving. e.g. `{Namespace}/{EventHub}/{PartitionId}/{Year}/{Month}/{Day}/{Hour}/{Minute}/{Second}`. Here all the parameters (Namespace,EventHub .. etc) are mandatory irrespective of order
         */
        archiveNameFormat: pulumi.Input<string>;
        /**
         * The name of the Container within the Blob Storage Account where messages should be archived.
         */
        blobContainerName: pulumi.Input<string>;
        /**
         * The Name of the Destination where the capture should take place. At this time the only supported value is `EventHubArchive.AzureBlockBlob`.
         *
         * > **Note:** At this time it's only possible to Capture EventHub messages to Blob Storage. There's [a Feature Request for the Azure SDK to add support for Capturing messages to Azure Data Lake here](https://github.com/Azure/azure-rest-api-specs/issues/2255).
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the Blob Storage Account where messages should be archived.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface EventHubNamespaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this EventHub namespace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         *
         * > **Note:** Due to the limitation of the current Azure API, once an EventHub Namespace has been assigned an identity, it cannot be removed.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Event Hub Namespace. Possible values are `SystemAssigned` or `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface EventHubNamespaceNetworkRulesets {
        /**
         * The default action to take when a rule is not matched. Possible values are `Allow` and `Deny`.
         */
        defaultAction: pulumi.Input<string>;
        /**
         * One or more `ipRule` blocks as defined below.
         */
        ipRules?: pulumi.Input<pulumi.Input<inputs.eventhub.EventHubNamespaceNetworkRulesetsIpRule>[]>;
        /**
         * Is public network access enabled for the EventHub Namespace? Defaults to `true`.
         *
         * > **Note:** The public network access setting at the network rule sets level should be the same as it's at the namespace level.
         */
        publicNetworkAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Whether Trusted Microsoft Services are allowed to bypass firewall.
         */
        trustedServiceAccessEnabled?: pulumi.Input<boolean>;
        /**
         * One or more `virtualNetworkRule` blocks as defined below.
         */
        virtualNetworkRules?: pulumi.Input<pulumi.Input<inputs.eventhub.EventHubNamespaceNetworkRulesetsVirtualNetworkRule>[]>;
    }
    interface EventHubNamespaceNetworkRulesetsIpRule {
        /**
         * The action to take when the rule is matched. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP mask to match on.
         */
        ipMask: pulumi.Input<string>;
    }
    interface EventHubNamespaceNetworkRulesetsVirtualNetworkRule {
        /**
         * Are missing virtual network service endpoints ignored?
         */
        ignoreMissingVirtualNetworkServiceEndpoint?: pulumi.Input<boolean>;
        /**
         * The id of the subnet to match on.
         */
        subnetId: pulumi.Input<string>;
    }
    interface EventHubRetentionDescription {
        /**
         * Specifies the Cleanup Policy for the EventHub. Possible values are `Delete` and `Compact`. Changing this forces a new resource to be created.
         */
        cleanupPolicy: pulumi.Input<string>;
        /**
         * Specifies the number of hours to retain the events for this Event Hub. The value is only used when `cleanupPolicy` is `Delete`.
         */
        retentionTimeInHours?: pulumi.Input<number>;
        /**
         * Specifies the number of hours to retain the tombstones markers of a compacted Event Hub. The value is only used when `cleanupPolicy` is `Compact`.
         */
        tombstoneRetentionTimeInHours?: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilter {
        /**
         * Compares a value of an event using a single boolean value.
         */
        boolEquals?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterBoolEqual>[]>;
        /**
         * Evaluates if a value of an event isn't NULL or undefined.
         */
        isNotNulls?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterIsNotNull>[]>;
        /**
         * Evaluates if a value of an event is NULL or undefined.
         *
         * Each nested block consists of a key and a value(s) element.
         */
        isNullOrUndefineds?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterIsNullOrUndefined>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberGreaterThans?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberGreaterThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberInRanges?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberIns?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberIn>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThanOrEquals?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberLessThanOrEqual>[]>;
        /**
         * Compares a value of an event using a single floating point number.
         */
        numberLessThans?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberLessThan>[]>;
        /**
         * Compares a value of an event using multiple floating point number ranges.
         */
        numberNotInRanges?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberNotInRange>[]>;
        /**
         * Compares a value of an event using multiple floating point numbers.
         */
        numberNotIns?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterNumberNotIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringContains?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringIns?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringIn>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotBeginsWiths?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringNotBeginsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotContains?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringNotContain>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotEndsWiths?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringNotEndsWith>[]>;
        /**
         * Compares a value of an event using multiple string values.
         */
        stringNotIns?: pulumi.Input<pulumi.Input<inputs.eventhub.EventSubscriptionAdvancedFilterStringNotIn>[]>;
    }
    interface EventSubscriptionAdvancedFilterBoolEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<boolean>;
    }
    interface EventSubscriptionAdvancedFilterIsNotNull {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface EventSubscriptionAdvancedFilterIsNullOrUndefined {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
    }
    interface EventSubscriptionAdvancedFilterNumberGreaterThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberGreaterThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberLessThan {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberLessThanOrEqual {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        value: pulumi.Input<number>;
    }
    interface EventSubscriptionAdvancedFilterNumberNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface EventSubscriptionAdvancedFilterNumberNotInRange {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<pulumi.Input<number>[]>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotBeginsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotContain {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotEndsWith {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAdvancedFilterStringNotIn {
        /**
         * Specifies the field within the event data that you want to use for filtering. Type of the field can be a number, boolean, or string.
         */
        key: pulumi.Input<string>;
        /**
         * Specifies an array of values to compare to when using a multiple values operator.
         *
         * > **Note:** A maximum of total number of advanced filter values allowed on event subscription is 25.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EventSubscriptionAzureFunctionEndpoint {
        /**
         * Specifies the ID of the Function where the Event Subscription will receive events. This must be the functions ID in format {function_app.id}/functions/{name}.
         */
        functionId: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
    }
    interface EventSubscriptionDeadLetterIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for dead lettering. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface EventSubscriptionDeliveryIdentity {
        /**
         * Specifies the type of Managed Service Identity that is used for event delivery. Allowed value is `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
        /**
         * The user identity associated with the resource.
         */
        userAssignedIdentity?: pulumi.Input<string>;
    }
    interface EventSubscriptionDeliveryProperty {
        /**
         * The name of the header to send on to the destination
         */
        headerName: pulumi.Input<string>;
        /**
         * True if the `value` is a secret and should be protected, otherwise false. If True, then this value won't be returned from Azure API calls
         */
        secret?: pulumi.Input<boolean>;
        /**
         * If the `type` is `Dynamic`, then provide the payload field to be used as the value. Valid source fields differ by subscription type.
         */
        sourceField?: pulumi.Input<string>;
        /**
         * Either `Static` or `Dynamic`
         */
        type: pulumi.Input<string>;
        /**
         * If the `type` is `Static`, then provide the value to use
         */
        value?: pulumi.Input<string>;
    }
    interface EventSubscriptionRetryPolicy {
        /**
         * Specifies the time to live (in minutes) for events. Supported range is `1` to `1440`. See [official documentation](https://docs.microsoft.com/azure/event-grid/manage-event-delivery#set-retry-policy) for more details.
         */
        eventTimeToLive: pulumi.Input<number>;
        /**
         * Specifies the maximum number of delivery retry attempts for events.
         */
        maxDeliveryAttempts: pulumi.Input<number>;
    }
    interface EventSubscriptionStorageBlobDeadLetterDestination {
        /**
         * Specifies the id of the storage account id where the storage blob is located.
         */
        storageAccountId: pulumi.Input<string>;
        /**
         * Specifies the name of the Storage blob container that is the destination of the deadletter events.
         */
        storageBlobContainerName: pulumi.Input<string>;
    }
    interface EventSubscriptionStorageQueueEndpoint {
        /**
         * Storage queue message time to live in seconds.
         */
        queueMessageTimeToLiveInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the name of the storage queue where the Event Subscription will receive events.
         */
        queueName: pulumi.Input<string>;
        /**
         * Specifies the id of the storage account id where the storage queue is located.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface EventSubscriptionSubjectFilter {
        /**
         * Specifies if `subjectBeginsWith` and `subjectEndsWith` case sensitive. This value
         */
        caseSensitive?: pulumi.Input<boolean>;
        /**
         * A string to filter events for an event subscription based on a resource path prefix.
         */
        subjectBeginsWith?: pulumi.Input<string>;
        /**
         * A string to filter events for an event subscription based on a resource path suffix.
         */
        subjectEndsWith?: pulumi.Input<string>;
    }
    interface EventSubscriptionWebhookEndpoint {
        /**
         * The Azure Active Directory Application ID or URI to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryAppIdOrUri?: pulumi.Input<string>;
        /**
         * The Azure Active Directory Tenant ID to get the access token that will be included as the bearer token in delivery requests.
         */
        activeDirectoryTenantId?: pulumi.Input<string>;
        /**
         * The base url of the webhook where the Event Subscription will receive events.
         */
        baseUrl?: pulumi.Input<string>;
        /**
         * Maximum number of events per batch.
         */
        maxEventsPerBatch?: pulumi.Input<number>;
        /**
         * Preferred batch size in Kilobytes.
         */
        preferredBatchSizeInKilobytes?: pulumi.Input<number>;
        /**
         * Specifies the url of the webhook where the Event Subscription will receive events.
         */
        url: pulumi.Input<string>;
    }
    interface NamespaceCustomerManagedKey {
        /**
         * The ID of the User Assigned Identity that has access to the key.
         */
        identityId: pulumi.Input<string>;
        /**
         * Used to specify whether enable Infrastructure Encryption (Double Encryption). Changing this forces a new resource to be created.
         */
        infrastructureEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the Key Vault Key which should be used to Encrypt the data in this Service Bus Namespace.
         */
        keyVaultKeyId: pulumi.Input<string>;
    }
    interface NamespaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Service Bus namespace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Service Bus Namespace.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Service Bus Namespace.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Service Bus Namespace. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface NamespaceNetworkRuleSet {
        /**
         * Specifies the default action for the Network Rule Set. Possible values are `Allow` and `Deny`. Defaults to `Allow`.
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more IP Addresses, or CIDR Blocks which should be able to access the Service Bus Namespace.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `networkRules` blocks as defined below.
         */
        networkRules?: pulumi.Input<pulumi.Input<inputs.eventhub.NamespaceNetworkRuleSetNetworkRule>[]>;
        /**
         * Whether to allow traffic over public network. Possible values are `true` and `false`. Defaults to `true`.
         *
         * > **Note:** To disable public network access, you must also configure the property `publicNetworkAccessEnabled`.
         */
        publicNetworkAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Are Azure Services that are known and trusted for this resource type are allowed to bypass firewall configuration? See [Trusted Microsoft Services](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/service-bus-messaging/includes/service-bus-trusted-services.md)
         */
        trustedServicesAllowed?: pulumi.Input<boolean>;
    }
    interface NamespaceNetworkRuleSetNetworkRule {
        /**
         * Should the Service Bus Namespace Network Rule Set ignore missing Virtual Network Service Endpoint option in the Subnet? Defaults to `false`.
         */
        ignoreMissingVnetServiceEndpoint?: pulumi.Input<boolean>;
        /**
         * The Subnet ID which should be able to access this Service Bus Namespace.
         */
        subnetId: pulumi.Input<string>;
    }
    interface SubscriptionClientScopedSubscription {
        /**
         * Specifies the Client ID of the application that created the client-scoped subscription. Changing this forces a new resource to be created.
         *
         * > **Note:** Client ID can be null or empty, but it must match the client ID set on the JMS client application. From the Azure Service Bus perspective, a null client ID and an empty client id have the same behavior. If the client ID is set to null or empty, it is only accessible to client applications whose client ID is also set to null or empty.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Whether the client scoped subscription is durable. This property can only be controlled from the application side.
         */
        isClientScopedSubscriptionDurable?: pulumi.Input<boolean>;
        /**
         * Whether the client scoped subscription is shareable. Defaults to `true` Changing this forces a new resource to be created.
         */
        isClientScopedSubscriptionShareable?: pulumi.Input<boolean>;
    }
    interface SubscriptionRuleCorrelationFilter {
        /**
         * Content type of the message.
         */
        contentType?: pulumi.Input<string>;
        /**
         * Identifier of the correlation.
         */
        correlationId?: pulumi.Input<string>;
        /**
         * Application specific label.
         */
        label?: pulumi.Input<string>;
        /**
         * Identifier of the message.
         */
        messageId?: pulumi.Input<string>;
        /**
         * A list of user defined properties to be included in the filter. Specified as a map of name/value pairs.
         *
         * > **Note:** When creating a subscription rule of type `CorrelationFilter` at least one property must be set in the `correlationFilter` block.
         */
        properties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Address of the queue to reply to.
         */
        replyTo?: pulumi.Input<string>;
        /**
         * Session identifier to reply to.
         */
        replyToSessionId?: pulumi.Input<string>;
        /**
         * Session identifier.
         */
        sessionId?: pulumi.Input<string>;
        /**
         * Address to send to.
         */
        to?: pulumi.Input<string>;
    }
}
export declare namespace extendedlocation {
    interface CustomLocationAuthentication {
        /**
         * Specifies the type of authentication.
         */
        type?: pulumi.Input<string>;
        /**
         * Specifies the value of authentication.
         */
        value: pulumi.Input<string>;
    }
}
export declare namespace fabric {
    interface CapacitySku {
        /**
         * The name of the SKU to use for the Fabric Capacity. Possible values are `F2`, `F4`, `F8`, `F16`, `F32`, `F64`, `F128`, `F256`, `F512`, `F1024`, `F2048`.
         */
        name: pulumi.Input<string>;
        /**
         * The tier of the SKU to use for the Fabric Capacity. The only possible value is `Fabric`.
         */
        tier: pulumi.Input<string>;
    }
}
export declare namespace fluidrelay {
    interface ServerCustomerManagedKey {
        /**
         * The Key Vault Key Id that will be used to encrypt the Fluid Relay Server.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The User Assigned Managed Identity ID to be used for accessing the Customer Managed Key for encryption.
         */
        userAssignedIdentityId: pulumi.Input<string>;
    }
    interface ServerIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Fluid Relay Service.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Fluid Relay Server.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Fluid Relay Server.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Fluid Relay Service. Possible values are `SystemAssigned`,`UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace frontdoor {
    interface CustomHttpsConfigurationCustomHttpsConfiguration {
        /**
         * The name of the Key Vault secret representing the full certificate PFX.
         */
        azureKeyVaultCertificateSecretName?: pulumi.Input<string>;
        /**
         * The version of the Key Vault secret representing the full certificate PFX.
         *
         * > **Note:** In order to enable the use of your own custom `HTTPS certificate` you must grant `Azure Front Door Service` access to your key vault. For instructions on how to configure your `Key Vault` correctly please refer to the [product documentation](https://docs.microsoft.com/azure/frontdoor/front-door-custom-domain-https#option-2-use-your-own-certificate).
         */
        azureKeyVaultCertificateSecretVersion?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault containing the SSL certificate.
         */
        azureKeyVaultCertificateVaultId?: pulumi.Input<string>;
        /**
         * Certificate source to encrypted `HTTPS` traffic with. Allowed values are `FrontDoor` or `AzureKeyVault`. Defaults to `FrontDoor`.
         *
         * The following attributes are only valid if `certificateSource` is set to `AzureKeyVault`:
         */
        certificateSource?: pulumi.Input<string>;
        /**
         * Minimum client TLS version supported.
         */
        minimumTlsVersion?: pulumi.Input<string>;
        provisioningState?: pulumi.Input<string>;
        provisioningSubstate?: pulumi.Input<string>;
    }
    interface FirewallPolicyCustomRule {
        /**
         * The action to perform when the rule is matched. Possible values are `Allow`, `Block`, `Log`, or `Redirect`.
         */
        action: pulumi.Input<string>;
        /**
         * Is the rule is enabled or disabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `matchCondition` block defined below. Can support up to `10` `matchCondition` blocks.
         */
        matchConditions?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyCustomRuleMatchCondition>[]>;
        /**
         * Gets name of the resource that is unique within a policy. This name can be used to access the resource.
         */
        name: pulumi.Input<string>;
        /**
         * The priority of the rule. Rules with a lower value will be evaluated before rules with a higher value. Defaults to `1`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The rate limit duration in minutes. Defaults to `1`.
         */
        rateLimitDurationInMinutes?: pulumi.Input<number>;
        /**
         * The rate limit threshold. Defaults to `10`.
         */
        rateLimitThreshold?: pulumi.Input<number>;
        /**
         * The type of rule. Possible values are `MatchRule` or `RateLimitRule`.
         */
        type: pulumi.Input<string>;
    }
    interface FirewallPolicyCustomRuleMatchCondition {
        /**
         * Up to `600` possible values to match. Limit is in total across all `matchCondition` blocks and `matchValues` arguments. String value itself can be up to `256` characters long.
         */
        matchValues: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The request variable to compare with. Possible values are `Cookies`, `PostArgs`, `QueryString`, `RemoteAddr`, `RequestBody`, `RequestHeader`, `RequestMethod`, `RequestUri`, or `SocketAddr`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Should the result of the condition be negated.
         */
        negationCondition?: pulumi.Input<boolean>;
        /**
         * Comparison type to use for matching with the variable value. Possible values are `Any`, `BeginsWith`, `Contains`, `EndsWith`, `Equal`, `GeoMatch`, `GreaterThan`, `GreaterThanOrEqual`, `IPMatch`, `LessThan`, `LessThanOrEqual` or `RegEx`.
         */
        operator: pulumi.Input<string>;
        /**
         * Match against a specific key if the `matchVariable` is `QueryString`, `PostArgs`, `RequestHeader` or `Cookies`.
         */
        selector?: pulumi.Input<string>;
        /**
         * Up to `5` transforms to apply. Possible values are `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `URLDecode` or`URLEncode`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyManagedRule {
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyManagedRuleExclusion>[]>;
        /**
         * One or more `override` blocks as defined below.
         */
        overrides?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyManagedRuleOverride>[]>;
        /**
         * The name of the managed rule to use with this resource.
         */
        type: pulumi.Input<string>;
        /**
         * The version on the managed rule to use with this resource.
         */
        version: pulumi.Input<string>;
    }
    interface FirewallPolicyManagedRuleExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         */
        selector: pulumi.Input<string>;
    }
    interface FirewallPolicyManagedRuleOverride {
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyManagedRuleOverrideExclusion>[]>;
        /**
         * The managed rule group to override.
         */
        ruleGroupName: pulumi.Input<string>;
        /**
         * One or more `rule` blocks as defined below. If none are specified, all of the rules in the group will be disabled.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyManagedRuleOverrideRule>[]>;
    }
    interface FirewallPolicyManagedRuleOverrideExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         */
        selector: pulumi.Input<string>;
    }
    interface FirewallPolicyManagedRuleOverrideRule {
        /**
         * The action to be applied when the rule matches. Possible values are `Allow`, `Block`, `Log`, or `Redirect`.
         */
        action: pulumi.Input<string>;
        /**
         * Is the managed rule override enabled or disabled. Defaults to `false`
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.frontdoor.FirewallPolicyManagedRuleOverrideRuleExclusion>[]>;
        /**
         * Identifier for the managed rule.
         */
        ruleId: pulumi.Input<string>;
    }
    interface FirewallPolicyManagedRuleOverrideRuleExclusion {
        /**
         * The variable type to be excluded. Possible values are `QueryStringArgNames`, `RequestBodyPostArgNames`, `RequestCookieNames`, `RequestHeaderNames`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Comparison operator to apply to the selector when specifying which elements in the collection this exclusion applies to. Possible values are: `Equals`, `Contains`, `StartsWith`, `EndsWith`, `EqualsAny`.
         */
        operator: pulumi.Input<string>;
        /**
         * Selector for the value in the `matchVariable` attribute this exclusion applies to.
         */
        selector: pulumi.Input<string>;
    }
    interface FrontdoorBackendPool {
        /**
         * A `backend` block as defined below.
         */
        backends: pulumi.Input<pulumi.Input<inputs.frontdoor.FrontdoorBackendPoolBackend>[]>;
        /**
         * Specifies the name of the `backendPoolHealthProbe` block within this resource to use for this `Backend Pool`.
         */
        healthProbeName: pulumi.Input<string>;
        /**
         * The ID of the FrontDoor.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the `backendPoolLoadBalancing` block within this resource to use for this `Backend Pool`.
         */
        loadBalancingName: pulumi.Input<string>;
        /**
         * Specifies the name of the Backend Pool.
         */
        name: pulumi.Input<string>;
    }
    interface FrontdoorBackendPoolBackend {
        /**
         * Location of the backend (IP address or FQDN)
         */
        address: pulumi.Input<string>;
        /**
         * Specifies if the backend is enabled or not. Valid options are `true` or `false`. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The value to use as the host header sent to the backend.
         */
        hostHeader: pulumi.Input<string>;
        /**
         * The HTTP TCP port number. Possible values are between `1` - `65535`.
         */
        httpPort: pulumi.Input<number>;
        /**
         * The HTTPS TCP port number. Possible values are between `1` - `65535`.
         */
        httpsPort: pulumi.Input<number>;
        /**
         * Priority to use for load balancing. Higher priorities will not be used for load balancing if any lower priority backend is healthy. Defaults to `1`.
         */
        priority?: pulumi.Input<number>;
        /**
         * Weight of this endpoint for load balancing purposes. Defaults to `50`.
         */
        weight?: pulumi.Input<number>;
    }
    interface FrontdoorBackendPoolHealthProbe {
        /**
         * Is this health probe enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The ID of the FrontDoor.
         */
        id?: pulumi.Input<string>;
        /**
         * The number of seconds between each Health Probe. Defaults to `120`.
         */
        intervalInSeconds?: pulumi.Input<number>;
        /**
         * Specifies the name of the Health Probe.
         */
        name: pulumi.Input<string>;
        /**
         * The path to use for the Health Probe. Default is `/`.
         */
        path?: pulumi.Input<string>;
        /**
         * Specifies HTTP method the health probe uses when querying the backend pool instances. Possible values include: `GET` and `HEAD`. Defaults to `GET`.
         *
         * > **NOTE:** Use the `HEAD` method if you do not need to check the response body of your health probe.
         */
        probeMethod?: pulumi.Input<string>;
        /**
         * Protocol scheme to use for the Health Probe. Possible values are `Http` and `Https`. Defaults to `Http`.
         */
        protocol?: pulumi.Input<string>;
    }
    interface FrontdoorBackendPoolLoadBalancing {
        /**
         * The additional latency in milliseconds for probes to fall into the lowest latency bucket. Defaults to `0`.
         */
        additionalLatencyMilliseconds?: pulumi.Input<number>;
        /**
         * The ID of the FrontDoor.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the Load Balancer.
         */
        name: pulumi.Input<string>;
        /**
         * The number of samples to consider for load balancing decisions. Defaults to `4`.
         */
        sampleSize?: pulumi.Input<number>;
        /**
         * The number of samples within the sample period that must succeed. Defaults to `2`.
         */
        successfulSamplesRequired?: pulumi.Input<number>;
    }
    interface FrontdoorBackendPoolSetting {
        /**
         * Specifies the send and receive timeout on forwarding request to the backend. When the timeout is reached, the request fails and returns. Possible values are between `0` - `240`. Defaults to `60`.
         */
        backendPoolsSendReceiveTimeoutSeconds?: pulumi.Input<number>;
        /**
         * Enforce certificate name check on `HTTPS` requests to all backend pools, this setting will have no effect on `HTTP` requests. Permitted values are `true` or `false`.
         *
         * > **NOTE:** `backendPoolsSendReceiveTimeoutSeconds` and `enforceBackendPoolsCertificateNameCheck` apply to all backend pools.
         */
        enforceBackendPoolsCertificateNameCheck: pulumi.Input<boolean>;
    }
    interface FrontdoorExplicitResourceOrder {
        backendPoolHealthProbeIds?: pulumi.Input<pulumi.Input<string>[]>;
        backendPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        backendPoolLoadBalancingIds?: pulumi.Input<pulumi.Input<string>[]>;
        frontendEndpointIds?: pulumi.Input<pulumi.Input<string>[]>;
        routingRuleIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FrontdoorFrontendEndpoint {
        /**
         * Specifies the host name of the `frontendEndpoint`. Must be a domain name. In order to use a name.azurefd.net domain, the name value must match the Front Door name.
         */
        hostName: pulumi.Input<string>;
        /**
         * The ID of the FrontDoor.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the `frontendEndpoint`.
         */
        name: pulumi.Input<string>;
        /**
         * Whether to allow session affinity on this host. Valid options are `true` or `false` Defaults to `false`.
         */
        sessionAffinityEnabled?: pulumi.Input<boolean>;
        /**
         * The TTL to use in seconds for session affinity, if applicable. Defaults to `0`.
         */
        sessionAffinityTtlSeconds?: pulumi.Input<number>;
        /**
         * Defines the Web Application Firewall policy `ID` for each host.
         */
        webApplicationFirewallPolicyLinkId?: pulumi.Input<string>;
    }
    interface FrontdoorRoutingRule {
        /**
         * Protocol schemes to match for the Backend Routing Rule. Possible values are `Http` and `Https`.
         */
        acceptedProtocols: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * `Enable` or `Disable` use of this Backend Routing Rule. Permitted values are `true` or `false`. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * A `forwardingConfiguration` block as defined below.
         */
        forwardingConfiguration?: pulumi.Input<inputs.frontdoor.FrontdoorRoutingRuleForwardingConfiguration>;
        /**
         * The names of the `frontendEndpoint` blocks within this resource to associate with this `routingRule`.
         */
        frontendEndpoints: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the FrontDoor.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the Routing Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The route patterns for the Backend Routing Rule.
         */
        patternsToMatches: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `redirectConfiguration` block as defined below.
         */
        redirectConfiguration?: pulumi.Input<inputs.frontdoor.FrontdoorRoutingRuleRedirectConfiguration>;
    }
    interface FrontdoorRoutingRuleForwardingConfiguration {
        /**
         * Specifies the name of the Backend Pool to forward the incoming traffic to.
         */
        backendPoolName: pulumi.Input<string>;
        /**
         * Specify the minimum caching duration (in ISO8601 notation e.g. `P1DT2H` for 1 day and 2 hours). Needs to be greater than 0 and smaller than 365 days. `cacheDuration` works only in combination with `cacheEnabled` set to `true`.
         */
        cacheDuration?: pulumi.Input<string>;
        /**
         * Specifies whether to Enable caching or not. Valid options are `true` or `false`. Defaults to `false`.
         */
        cacheEnabled?: pulumi.Input<boolean>;
        /**
         * Defines cache behaviour in relation to query string parameters. Valid options are `StripAll`, `StripAllExcept`, `StripOnly` or `StripNone`. Defaults to `StripAll`.
         */
        cacheQueryParameterStripDirective?: pulumi.Input<string>;
        /**
         * Specify query parameters (array). Works only in combination with `cacheQueryParameterStripDirective` set to `StripAllExcept` or `StripOnly`.
         */
        cacheQueryParameters?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether to use dynamic compression when caching. Valid options are `true` or `false`. Defaults to `false`.
         */
        cacheUseDynamicCompression?: pulumi.Input<boolean>;
        /**
         * Path to use when constructing the request to forward to the backend. This functions as a URL Rewrite. Default behaviour preserves the URL path.
         */
        customForwardingPath?: pulumi.Input<string>;
        /**
         * Protocol to use when redirecting. Valid options are `HttpOnly`, `HttpsOnly`, or `MatchRequest`. Defaults to `HttpsOnly`.
         */
        forwardingProtocol?: pulumi.Input<string>;
    }
    interface FrontdoorRoutingRuleRedirectConfiguration {
        /**
         * The destination fragment in the portion of URL after '#'. Set this to add a fragment to the redirect URL.
         */
        customFragment?: pulumi.Input<string>;
        /**
         * Set this to change the URL for the redirection.
         */
        customHost?: pulumi.Input<string>;
        /**
         * The path to retain as per the incoming request, or update in the URL for the redirection.
         */
        customPath?: pulumi.Input<string>;
        /**
         * Replace any existing query string from the incoming request URL.
         */
        customQueryString?: pulumi.Input<string>;
        /**
         * Protocol to use when redirecting. Valid options are `HttpOnly`, `HttpsOnly`, or `MatchRequest`.
         */
        redirectProtocol: pulumi.Input<string>;
        /**
         * Status code for the redirect. Valida options are `Moved`, `Found`, `TemporaryRedirect`, `PermanentRedirect`.
         */
        redirectType: pulumi.Input<string>;
    }
    interface RulesEngineRule {
        /**
         * An `action` block as defined below.
         */
        action?: pulumi.Input<inputs.frontdoor.RulesEngineRuleAction>;
        /**
         * One or more `matchCondition` block as defined below.
         */
        matchConditions?: pulumi.Input<pulumi.Input<inputs.frontdoor.RulesEngineRuleMatchCondition>[]>;
        /**
         * The name of the rule.
         */
        name: pulumi.Input<string>;
        /**
         * Priority of the rule, must be unique per rules engine definition.
         */
        priority: pulumi.Input<number>;
    }
    interface RulesEngineRuleAction {
        /**
         * A `requestHeader` block as defined below.
         */
        requestHeaders?: pulumi.Input<pulumi.Input<inputs.frontdoor.RulesEngineRuleActionRequestHeader>[]>;
        /**
         * A `responseHeader` block as defined below.
         */
        responseHeaders?: pulumi.Input<pulumi.Input<inputs.frontdoor.RulesEngineRuleActionResponseHeader>[]>;
    }
    interface RulesEngineRuleActionRequestHeader {
        /**
         * can be set to `Overwrite`, `Append` or `Delete`.
         */
        headerActionType?: pulumi.Input<string>;
        /**
         * header name (string).
         */
        headerName?: pulumi.Input<string>;
        /**
         * value name (string).
         */
        value?: pulumi.Input<string>;
    }
    interface RulesEngineRuleActionResponseHeader {
        /**
         * can be set to `Overwrite`, `Append` or `Delete`.
         */
        headerActionType?: pulumi.Input<string>;
        /**
         * header name (string).
         */
        headerName?: pulumi.Input<string>;
        /**
         * value name (string).
         */
        value?: pulumi.Input<string>;
    }
    interface RulesEngineRuleMatchCondition {
        /**
         * can be set to `true` or `false` to negate the given condition. Defaults to `false`.
         */
        negateCondition?: pulumi.Input<boolean>;
        /**
         * can be set to `Any`, `IPMatch`, `GeoMatch`, `Equal`, `Contains`, `LessThan`, `GreaterThan`, `LessThanOrEqual`, `GreaterThanOrEqual`, `BeginsWith` or `EndsWith`
         */
        operator: pulumi.Input<string>;
        /**
         * match against a specific key when `variable` is set to `PostArgs` or `RequestHeader`. It cannot be used with `QueryString` and `RequestMethod`.
         */
        selector?: pulumi.Input<string>;
        /**
         * can be set to one or more values out of `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` and `UrlEncode`
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * (array) can contain one or more strings.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * can be set to `IsMobile`, `RemoteAddr`, `RequestMethod`, `QueryString`, `PostArgs`, `RequestURI`, `RequestPath`, `RequestFilename`, `RequestFilenameExtension`,`RequestHeader`,`RequestBody` or `RequestScheme`.
         */
        variable?: pulumi.Input<string>;
    }
}
export declare namespace hdinsight {
    interface HBaseClusterComponentVersion {
        /**
         * The version of HBase which should be used for this HDInsight HBase Cluster. Changing this forces a new resource to be created.
         */
        hbase: pulumi.Input<string>;
    }
    interface HBaseClusterComputeIsolation {
        /**
         * This field indicates whether enable compute isolation or not. Possible values are `true` or `false`.
         */
        computeIsolationEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the host SKU.
         */
        hostSku?: pulumi.Input<string>;
    }
    interface HBaseClusterDiskEncryption {
        /**
         * This is an algorithm identifier for encryption. Possible values are `RSA1_5`, `RSA-OAEP`, `RSA-OAEP-256`.
         */
        encryptionAlgorithm?: pulumi.Input<string>;
        /**
         * This is indicator to show whether resource disk encryption is enabled.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the key vault key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * This is the resource ID of Managed Identity used to access the key vault.
         */
        keyVaultManagedIdentityId?: pulumi.Input<string>;
    }
    interface HBaseClusterExtension {
        /**
         * The workspace ID of the log analytics extension.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The workspace key of the log analytics extension.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface HBaseClusterGateway {
        /**
         * The password used for the Ambari Portal.
         *
         * > **Note:** This password must be different from the one used for the `headNode`, `workerNode` and `zookeeperNode` roles.
         */
        password: pulumi.Input<string>;
        /**
         * The username used for the Ambari Portal. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HBaseClusterMetastores {
        /**
         * An `ambari` block as defined below.
         */
        ambari?: pulumi.Input<inputs.hdinsight.HBaseClusterMetastoresAmbari>;
        /**
         * A `hive` block as defined below.
         */
        hive?: pulumi.Input<inputs.hdinsight.HBaseClusterMetastoresHive>;
        /**
         * An `oozie` block as defined below.
         */
        oozie?: pulumi.Input<inputs.hdinsight.HBaseClusterMetastoresOozie>;
    }
    interface HBaseClusterMetastoresAmbari {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Ambari metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HBaseClusterMetastoresHive {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Hive metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HBaseClusterMetastoresOozie {
        /**
         * The external Oozie metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Oozie metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HBaseClusterMonitor {
        /**
         * The Operations Management Suite (OMS) workspace ID.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The Operations Management Suite (OMS) workspace key.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface HBaseClusterNetwork {
        /**
         * The direction of the resource provider connection. Possible values include `Inbound` or `Outbound`. Defaults to `Inbound`. Changing this forces a new resource to be created.
         *
         * > **Note:** To enable the private link the `connectionDirection` must be set to `Outbound`.
         */
        connectionDirection?: pulumi.Input<string>;
        /**
         * Is the private link enabled? Possible values include `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        privateLinkEnabled?: pulumi.Input<boolean>;
    }
    interface HBaseClusterPrivateLinkConfiguration {
        /**
         * The ID of the private link service group.
         */
        groupId: pulumi.Input<string>;
        /**
         * An `ipConfiguration` block as defined below.
         */
        ipConfiguration: pulumi.Input<inputs.hdinsight.HBaseClusterPrivateLinkConfigurationIpConfiguration>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface HBaseClusterPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates whether this IP configuration is primary.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The private IP address of the IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The private IP allocation method. Possible values are `Dynamic` and `Static`.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The ID of the Subnet within the Virtual Network where the IP configuration should be provisioned.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface HBaseClusterRoles {
        /**
         * A `headNode` block as defined above.
         */
        headNode: pulumi.Input<inputs.hdinsight.HBaseClusterRolesHeadNode>;
        /**
         * A `workerNode` block as defined below.
         */
        workerNode: pulumi.Input<inputs.hdinsight.HBaseClusterRolesWorkerNode>;
        /**
         * A `zookeeperNode` block as defined below.
         */
        zookeeperNode: pulumi.Input<inputs.hdinsight.HBaseClusterRolesZookeeperNode>;
    }
    interface HBaseClusterRolesHeadNode {
        /**
         * The Password associated with the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HBaseClusterRolesHeadNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Head Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_E96a_V4`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HBaseClusterRolesHeadNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HBaseClusterRolesWorkerNode {
        /**
         * A `autoscale` block as defined below.
         */
        autoscale?: pulumi.Input<inputs.hdinsight.HBaseClusterRolesWorkerNodeAutoscale>;
        /**
         * The Password associated with the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HBaseClusterRolesWorkerNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The Username of the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Worker Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HBaseClusterRolesWorkerNodeAutoscale {
        /**
         * A `recurrence` block as defined below.
         *
         * > **Note:** Either a `capacity` or `recurrence` block must be specified - but not both.
         */
        recurrence?: pulumi.Input<inputs.hdinsight.HBaseClusterRolesWorkerNodeAutoscaleRecurrence>;
    }
    interface HBaseClusterRolesWorkerNodeAutoscaleRecurrence {
        /**
         * A list of `schedule` blocks as defined below.
         */
        schedules: pulumi.Input<pulumi.Input<inputs.hdinsight.HBaseClusterRolesWorkerNodeAutoscaleRecurrenceSchedule>[]>;
        /**
         * The time zone for the autoscale schedule times.
         */
        timezone: pulumi.Input<string>;
    }
    interface HBaseClusterRolesWorkerNodeAutoscaleRecurrenceSchedule {
        /**
         * The days of the week to perform autoscale. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        days: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of worker nodes to autoscale at the specified time.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The time of day to perform the autoscale in 24hour format.
         */
        time: pulumi.Input<string>;
    }
    interface HBaseClusterRolesWorkerNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HBaseClusterRolesZookeeperNode {
        /**
         * The Password associated with the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HBaseClusterRolesZookeeperNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Zookeeper Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HBaseClusterRolesZookeeperNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HBaseClusterSecurityProfile {
        /**
         * The resource ID of the Azure Active Directory Domain Service. Changing this forces a new resource to be created.
         */
        aaddsResourceId: pulumi.Input<string>;
        /**
         * A list of the distinguished names for the cluster user groups. Changing this forces a new resource to be created.
         */
        clusterUsersGroupDns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainName: pulumi.Input<string>;
        /**
         * The user password of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUserPassword: pulumi.Input<string>;
        /**
         * The username of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUsername: pulumi.Input<string>;
        /**
         * A list of the LDAPS URLs to communicate with the Azure Active Directory. Changing this forces a new resource to be created.
         */
        ldapsUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The User Assigned Identity for the HDInsight Cluster. Changing this forces a new resource to be created.
         */
        msiResourceId: pulumi.Input<string>;
    }
    interface HBaseClusterStorageAccount {
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The Access Key which should be used to connect to the Storage Account. Changing this forces a new resource to be created.
         */
        storageAccountKey: pulumi.Input<string>;
        /**
         * The ID of the Storage Container. Changing this forces a new resource to be created.
         *
         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
         */
        storageContainerId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId?: pulumi.Input<string>;
    }
    interface HBaseClusterStorageAccountGen2 {
        /**
         * The ID of the Gen2 Filesystem. Changing this forces a new resource to be created.
         */
        filesystemId: pulumi.Input<string>;
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The ID of Managed Identity to use for accessing the Gen2 filesystem. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
         */
        managedIdentityResourceId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId: pulumi.Input<string>;
    }
    interface HadoopClusterComponentVersion {
        /**
         * The version of Hadoop which should be used for this HDInsight Hadoop Cluster. Changing this forces a new resource to be created.
         */
        hadoop: pulumi.Input<string>;
    }
    interface HadoopClusterComputeIsolation {
        /**
         * This field indicates whether enable compute isolation or not. Possible values are `true` or `false`.
         */
        computeIsolationEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the host SKU.
         */
        hostSku?: pulumi.Input<string>;
    }
    interface HadoopClusterDiskEncryption {
        /**
         * This is an algorithm identifier for encryption. Possible values are `RSA1_5`, `RSA-OAEP`, `RSA-OAEP-256`.
         */
        encryptionAlgorithm?: pulumi.Input<string>;
        /**
         * This is indicator to show whether resource disk encryption is enabled.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the key vault key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * This is the resource ID of Managed Identity used to access the key vault.
         */
        keyVaultManagedIdentityId?: pulumi.Input<string>;
    }
    interface HadoopClusterExtension {
        /**
         * The workspace ID of the log analytics extension.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The workspace key of the log analytics extension.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface HadoopClusterGateway {
        /**
         * The password used for the Ambari Portal.
         *
         * > **Note:** This password must be different from the one used for the `headNode`, `workerNode` and `zookeeperNode` roles.
         */
        password: pulumi.Input<string>;
        /**
         * The username used for the Ambari Portal. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HadoopClusterMetastores {
        /**
         * An `ambari` block as defined below.
         */
        ambari?: pulumi.Input<inputs.hdinsight.HadoopClusterMetastoresAmbari>;
        /**
         * A `hive` block as defined below.
         */
        hive?: pulumi.Input<inputs.hdinsight.HadoopClusterMetastoresHive>;
        /**
         * An `oozie` block as defined below.
         */
        oozie?: pulumi.Input<inputs.hdinsight.HadoopClusterMetastoresOozie>;
    }
    interface HadoopClusterMetastoresAmbari {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Ambari metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HadoopClusterMetastoresHive {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Hive metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HadoopClusterMetastoresOozie {
        /**
         * The external Oozie metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Oozie metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface HadoopClusterMonitor {
        /**
         * The Operations Management Suite (OMS) workspace ID.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The Operations Management Suite (OMS) workspace key.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface HadoopClusterNetwork {
        /**
         * The direction of the resource provider connection. Possible values include `Inbound` or `Outbound`. Defaults to `Inbound`. Changing this forces a new resource to be created.
         *
         * > **Note:** To enabled the private link the `connectionDirection` must be set to `Outbound`.
         */
        connectionDirection?: pulumi.Input<string>;
        /**
         * Is the private link enabled? Possible values include `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        privateLinkEnabled?: pulumi.Input<boolean>;
    }
    interface HadoopClusterPrivateLinkConfiguration {
        /**
         * The ID of the private link service group.
         */
        groupId: pulumi.Input<string>;
        /**
         * An `ipConfiguration` block as defined below.
         */
        ipConfiguration: pulumi.Input<inputs.hdinsight.HadoopClusterPrivateLinkConfigurationIpConfiguration>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface HadoopClusterPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates whether this IP configuration is primary.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The private IP address of the IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The private IP allocation method. Possible values are `Dynamic` and `Static`.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The ID of the Subnet within the Virtual Network where the IP configuration should be provisioned.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface HadoopClusterRoles {
        /**
         * A `edgeNode` block as defined below.
         */
        edgeNode?: pulumi.Input<inputs.hdinsight.HadoopClusterRolesEdgeNode>;
        /**
         * A `headNode` block as defined above.
         */
        headNode: pulumi.Input<inputs.hdinsight.HadoopClusterRolesHeadNode>;
        /**
         * A `workerNode` block as defined below.
         */
        workerNode: pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNode>;
        /**
         * A `zookeeperNode` block as defined below.
         */
        zookeeperNode: pulumi.Input<inputs.hdinsight.HadoopClusterRolesZookeeperNode>;
    }
    interface HadoopClusterRolesEdgeNode {
        /**
         * The HTTPS Connectivity Endpoint for this HDInsight Hadoop Cluster. One or more `httpsEndpoints` blocks as defined below.
         */
        httpsEndpoints?: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesEdgeNodeHttpsEndpoint>[]>;
        /**
         * A `installScriptAction` block as defined below.
         */
        installScriptActions: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesEdgeNodeInstallScriptAction>[]>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * A `uninstallScriptActions` block as defined below. Changing this forces a new resource to be created.
         */
        uninstallScriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesEdgeNodeUninstallScriptAction>[]>;
        /**
         * The Size of the Virtual Machine which should be used as the Edge Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HadoopClusterRolesEdgeNodeHttpsEndpoint {
        /**
         * A list of access modes for the application.
         */
        accessModes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The destination port to connect to.
         */
        destinationPort?: pulumi.Input<number>;
        /**
         * The value indicates whether the gateway authentication is enabled or not.
         */
        disableGatewayAuth?: pulumi.Input<boolean>;
        /**
         * The private ip address of the endpoint.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The application's subdomain suffix.
         */
        subDomainSuffix?: pulumi.Input<string>;
    }
    interface HadoopClusterRolesEdgeNodeInstallScriptAction {
        /**
         * The name of the install script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI pointing to the script to run during the installation of the edge node.
         */
        uri: pulumi.Input<string>;
    }
    interface HadoopClusterRolesEdgeNodeUninstallScriptAction {
        /**
         * The name of the uninstall script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI pointing to the script to run during the installation of the edge node.
         */
        uri: pulumi.Input<string>;
    }
    interface HadoopClusterRolesHeadNode {
        /**
         * The Password associated with the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesHeadNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Head Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HadoopClusterRolesHeadNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HadoopClusterRolesWorkerNode {
        /**
         * A `autoscale` block as defined below.
         */
        autoscale?: pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNodeAutoscale>;
        /**
         * The Password associated with the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The Username of the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Worker Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HadoopClusterRolesWorkerNodeAutoscale {
        /**
         * A `capacity` block as defined below.
         */
        capacity?: pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNodeAutoscaleCapacity>;
        /**
         * A `recurrence` block as defined below.
         *
         * > **Note:** Either a `capacity` or `recurrence` block must be specified - but not both.
         */
        recurrence?: pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNodeAutoscaleRecurrence>;
    }
    interface HadoopClusterRolesWorkerNodeAutoscaleCapacity {
        /**
         * The maximum number of worker nodes to autoscale to based on the cluster's activity.
         */
        maxInstanceCount: pulumi.Input<number>;
        /**
         * The minimum number of worker nodes to autoscale to based on the cluster's activity.
         */
        minInstanceCount: pulumi.Input<number>;
    }
    interface HadoopClusterRolesWorkerNodeAutoscaleRecurrence {
        /**
         * A list of `schedule` blocks as defined below.
         */
        schedules: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesWorkerNodeAutoscaleRecurrenceSchedule>[]>;
        /**
         * The time zone for the autoscale schedule times.
         */
        timezone: pulumi.Input<string>;
    }
    interface HadoopClusterRolesWorkerNodeAutoscaleRecurrenceSchedule {
        /**
         * The days of the week to perform autoscale. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        days: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of worker nodes to autoscale at the specified time.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The time of day to perform the autoscale in 24hour format.
         */
        time: pulumi.Input<string>;
    }
    interface HadoopClusterRolesWorkerNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HadoopClusterRolesZookeeperNode {
        /**
         * The Password associated with the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.HadoopClusterRolesZookeeperNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Zookeeper Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface HadoopClusterRolesZookeeperNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface HadoopClusterSecurityProfile {
        /**
         * The resource ID of the Azure Active Directory Domain Service. Changing this forces a new resource to be created.
         */
        aaddsResourceId: pulumi.Input<string>;
        /**
         * A list of the distinguished names for the cluster user groups. Changing this forces a new resource to be created.
         */
        clusterUsersGroupDns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainName: pulumi.Input<string>;
        /**
         * The user password of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUserPassword: pulumi.Input<string>;
        /**
         * The username of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUsername: pulumi.Input<string>;
        /**
         * A list of the LDAPS URLs to communicate with the Azure Active Directory. Changing this forces a new resource to be created.
         */
        ldapsUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The User Assigned Identity for the HDInsight Cluster. Changing this forces a new resource to be created.
         */
        msiResourceId: pulumi.Input<string>;
    }
    interface HadoopClusterStorageAccount {
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The Access Key which should be used to connect to the Storage Account. Changing this forces a new resource to be created.
         */
        storageAccountKey: pulumi.Input<string>;
        /**
         * The ID of the Storage Container. Changing this forces a new resource to be created.
         *
         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
         */
        storageContainerId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId?: pulumi.Input<string>;
    }
    interface HadoopClusterStorageAccountGen2 {
        /**
         * The ID of the Gen2 Filesystem. Changing this forces a new resource to be created.
         */
        filesystemId: pulumi.Input<string>;
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The ID of Managed Identity to use for accessing the Gen2 filesystem. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
         */
        managedIdentityResourceId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterComponentVersion {
        /**
         * The version of Interactive Query which should be used for this HDInsight Interactive Query Cluster. Changing this forces a new resource to be created.
         */
        interactiveHive: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterComputeIsolation {
        /**
         * This field indicates whether enable compute isolation or not. Possible values are `true` or `false`.
         */
        computeIsolationEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the host SKU.
         */
        hostSku?: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterDiskEncryption {
        /**
         * This is an algorithm identifier for encryption. Possible values are `RSA1_5`, `RSA-OAEP`, `RSA-OAEP-256`.
         */
        encryptionAlgorithm?: pulumi.Input<string>;
        /**
         * This is indicator to show whether resource disk encryption is enabled.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the key vault key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * This is the resource ID of Managed Identity used to access the key vault.
         */
        keyVaultManagedIdentityId?: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterExtension {
        /**
         * The workspace ID of the log analytics extension.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The workspace key of the log analytics extension.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterGateway {
        /**
         * The password used for the Ambari Portal.
         *
         * > **Note:** This password must be different from the one used for the `headNode`, `workerNode` and `zookeeperNode` roles.
         */
        password: pulumi.Input<string>;
        /**
         * The username used for the Ambari Portal. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterMetastores {
        /**
         * An `ambari` block as defined below.
         */
        ambari?: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterMetastoresAmbari>;
        /**
         * A `hive` block as defined below.
         */
        hive?: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterMetastoresHive>;
        /**
         * An `oozie` block as defined below.
         */
        oozie?: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterMetastoresOozie>;
    }
    interface InteractiveQueryClusterMetastoresAmbari {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Ambari metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterMetastoresHive {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Hive metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterMetastoresOozie {
        /**
         * The external Oozie metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Oozie metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterMonitor {
        /**
         * The Operations Management Suite (OMS) workspace ID.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The Operations Management Suite (OMS) workspace key.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterNetwork {
        /**
         * The direction of the resource provider connection. Possible values include `Inbound` or `Outbound`. Defaults to `Inbound`. Changing this forces a new resource to be created.
         *
         * > **Note:** To enabled the private link the `connectionDirection` must be set to `Outbound`.
         */
        connectionDirection?: pulumi.Input<string>;
        /**
         * Is the private link enabled? Possible values include `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        privateLinkEnabled?: pulumi.Input<boolean>;
    }
    interface InteractiveQueryClusterPrivateLinkConfiguration {
        /**
         * The ID of the private link service group.
         */
        groupId: pulumi.Input<string>;
        /**
         * An `ipConfiguration` block as defined below.
         */
        ipConfiguration: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterPrivateLinkConfigurationIpConfiguration>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates whether this IP configuration is primary.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The private IP address of the IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The private IP allocation method. Possible values are `Dynamic` and `Static`.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The ID of the Subnet within the Virtual Network where the IP configuration should be provisioned.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRoles {
        /**
         * A `headNode` block as defined above.
         */
        headNode: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesHeadNode>;
        /**
         * A `workerNode` block as defined below.
         */
        workerNode: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesWorkerNode>;
        /**
         * A `zookeeperNode` block as defined below.
         */
        zookeeperNode: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesZookeeperNode>;
    }
    interface InteractiveQueryClusterRolesHeadNode {
        /**
         * The Password associated with the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesHeadNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Head Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         *
         * > **Note:** High memory instances must be specified for the Head Node (Azure suggests a `Standard_D13_V2`).
         */
        vmSize: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesHeadNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesWorkerNode {
        /**
         * A `autoscale` block as defined below.
         */
        autoscale?: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesWorkerNodeAutoscale>;
        /**
         * The Password associated with the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesWorkerNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The Username of the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Worker Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         *
         * > **Note:** High memory instances must be specified for the Head Node (Azure suggests a `Standard_D14_V2`).
         */
        vmSize: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesWorkerNodeAutoscale {
        /**
         * A `recurrence` block as defined below.
         */
        recurrence?: pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesWorkerNodeAutoscaleRecurrence>;
    }
    interface InteractiveQueryClusterRolesWorkerNodeAutoscaleRecurrence {
        /**
         * A list of `schedule` blocks as defined below.
         */
        schedules: pulumi.Input<pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesWorkerNodeAutoscaleRecurrenceSchedule>[]>;
        /**
         * The time zone for the autoscale schedule times.
         */
        timezone: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesWorkerNodeAutoscaleRecurrenceSchedule {
        /**
         * The days of the week to perform autoscale. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        days: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of worker nodes to autoscale at the specified time.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The time of day to perform the autoscale in 24hour format.
         */
        time: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesWorkerNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesZookeeperNode {
        /**
         * The Password associated with the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.InteractiveQueryClusterRolesZookeeperNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Zookeeper Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterRolesZookeeperNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterSecurityProfile {
        /**
         * The resource ID of the Azure Active Directory Domain Service. Changing this forces a new resource to be created.
         */
        aaddsResourceId: pulumi.Input<string>;
        /**
         * A list of the distinguished names for the cluster user groups. Changing this forces a new resource to be created.
         */
        clusterUsersGroupDns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainName: pulumi.Input<string>;
        /**
         * The user password of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUserPassword: pulumi.Input<string>;
        /**
         * The username of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUsername: pulumi.Input<string>;
        /**
         * A list of the LDAPS URLs to communicate with the Azure Active Directory. Changing this forces a new resource to be created.
         */
        ldapsUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The User Assigned Identity for the HDInsight Cluster. Changing this forces a new resource to be created.
         */
        msiResourceId: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterStorageAccount {
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The Access Key which should be used to connect to the Storage Account. Changing this forces a new resource to be created.
         */
        storageAccountKey: pulumi.Input<string>;
        /**
         * The ID of the Storage Container. Changing this forces a new resource to be created.
         *
         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
         */
        storageContainerId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId?: pulumi.Input<string>;
    }
    interface InteractiveQueryClusterStorageAccountGen2 {
        /**
         * The ID of the Gen2 Filesystem. Changing this forces a new resource to be created.
         */
        filesystemId: pulumi.Input<string>;
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The ID of Managed Identity to use for accessing the Gen2 filesystem. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
         */
        managedIdentityResourceId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId: pulumi.Input<string>;
    }
    interface KafkaClusterComponentVersion {
        /**
         * The version of Kafka which should be used for this HDInsight Kafka Cluster. Changing this forces a new resource to be created.
         */
        kafka: pulumi.Input<string>;
    }
    interface KafkaClusterComputeIsolation {
        /**
         * This field indicates whether enable compute isolation or not. Possible values are `true` or `false`.
         */
        computeIsolationEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the host SKU.
         */
        hostSku?: pulumi.Input<string>;
    }
    interface KafkaClusterDiskEncryption {
        /**
         * This is an algorithm identifier for encryption. Possible values are `RSA1_5`, `RSA-OAEP`, `RSA-OAEP-256`.
         */
        encryptionAlgorithm?: pulumi.Input<string>;
        /**
         * This is indicator to show whether resource disk encryption is enabled.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the key vault key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * This is the resource ID of Managed Identity used to access the key vault.
         */
        keyVaultManagedIdentityId?: pulumi.Input<string>;
    }
    interface KafkaClusterExtension {
        /**
         * The workspace ID of the log analytics extension.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The workspace key of the log analytics extension.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface KafkaClusterGateway {
        /**
         * The password used for the Ambari Portal.
         *
         * > **Note:** This password must be different from the one used for the `headNode`, `workerNode` and `zookeeperNode` roles.
         */
        password: pulumi.Input<string>;
        /**
         * The username used for the Ambari Portal. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface KafkaClusterMetastores {
        /**
         * An `ambari` block as defined below.
         */
        ambari?: pulumi.Input<inputs.hdinsight.KafkaClusterMetastoresAmbari>;
        /**
         * A `hive` block as defined below.
         */
        hive?: pulumi.Input<inputs.hdinsight.KafkaClusterMetastoresHive>;
        /**
         * An `oozie` block as defined below.
         */
        oozie?: pulumi.Input<inputs.hdinsight.KafkaClusterMetastoresOozie>;
    }
    interface KafkaClusterMetastoresAmbari {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Ambari metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface KafkaClusterMetastoresHive {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Hive metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface KafkaClusterMetastoresOozie {
        /**
         * The external Oozie metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Oozie metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface KafkaClusterMonitor {
        /**
         * The Operations Management Suite (OMS) workspace ID.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The Operations Management Suite (OMS) workspace key.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface KafkaClusterNetwork {
        /**
         * The direction of the resource provider connection. Possible values include `Inbound` or `Outbound`. Defaults to `Inbound`. Changing this forces a new resource to be created.
         *
         * > **Note:** To enabled the private link the `connectionDirection` must be set to `Outbound`.
         */
        connectionDirection?: pulumi.Input<string>;
        /**
         * Is the private link enabled? Possible values include `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        privateLinkEnabled?: pulumi.Input<boolean>;
    }
    interface KafkaClusterPrivateLinkConfiguration {
        /**
         * The ID of the private link service group.
         */
        groupId: pulumi.Input<string>;
        /**
         * An `ipConfiguration` block as defined below.
         */
        ipConfiguration: pulumi.Input<inputs.hdinsight.KafkaClusterPrivateLinkConfigurationIpConfiguration>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface KafkaClusterPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates whether this IP configuration is primary.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The private IP address of the IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The private IP allocation method. Possible values are `Dynamic` and `Static`.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The ID of the Subnet within the Virtual Network where the IP configuration should be provisioned.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface KafkaClusterRestProxy {
        /**
         * The Azure Active Directory Security Group ID. Changing this forces a new resource to be created.
         */
        securityGroupId: pulumi.Input<string>;
        /**
         * The Azure Active Directory Security Group name. Changing this forces a new resource to be created.
         *
         * > **Note:** The `securityGroupName` property will be Required in version 3.0 of the AzureRM Provider.
         */
        securityGroupName: pulumi.Input<string>;
    }
    interface KafkaClusterRoles {
        /**
         * A `headNode` block as defined above.
         */
        headNode: pulumi.Input<inputs.hdinsight.KafkaClusterRolesHeadNode>;
        /**
         * A `kafkaManagementNode` block as defined below.
         *
         * > **Note:** This property has been deprecated and will be removed in version 4.0.
         */
        kafkaManagementNode?: pulumi.Input<inputs.hdinsight.KafkaClusterRolesKafkaManagementNode>;
        /**
         * A `workerNode` block as defined below.
         */
        workerNode: pulumi.Input<inputs.hdinsight.KafkaClusterRolesWorkerNode>;
        /**
         * A `zookeeperNode` block as defined below.
         */
        zookeeperNode: pulumi.Input<inputs.hdinsight.KafkaClusterRolesZookeeperNode>;
    }
    interface KafkaClusterRolesHeadNode {
        /**
         * The Password associated with the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.KafkaClusterRolesHeadNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Head Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface KafkaClusterRolesHeadNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface KafkaClusterRolesKafkaManagementNode {
        /**
         * The Password associated with the local administrator for the Kafka Management Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.KafkaClusterRolesKafkaManagementNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Kafka Management Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Kafka Management Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Kafka Management Nodes.
         *
         * > **Note:** The `username` value is automatically generated by the service and cannot be user specified. This property will become `Computed` only in 4.0 of the provider.
         */
        username?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Kafka Management Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Kafka Management Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface KafkaClusterRolesKafkaManagementNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface KafkaClusterRolesWorkerNode {
        /**
         * The number of Data Disks which should be assigned to each Worker Node, which can be between 1 and 8. Changing this forces a new resource to be created.
         */
        numberOfDisksPerNode: pulumi.Input<number>;
        /**
         * The Password associated with the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.KafkaClusterRolesWorkerNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The Username of the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Worker Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface KafkaClusterRolesWorkerNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface KafkaClusterRolesZookeeperNode {
        /**
         * The Password associated with the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.KafkaClusterRolesZookeeperNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Zookeeper Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface KafkaClusterRolesZookeeperNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface KafkaClusterSecurityProfile {
        /**
         * The resource ID of the Azure Active Directory Domain Service. Changing this forces a new resource to be created.
         */
        aaddsResourceId: pulumi.Input<string>;
        /**
         * A list of the distinguished names for the cluster user groups. Changing this forces a new resource to be created.
         */
        clusterUsersGroupDns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainName: pulumi.Input<string>;
        /**
         * The user password of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUserPassword: pulumi.Input<string>;
        /**
         * The username of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUsername: pulumi.Input<string>;
        /**
         * A list of the LDAPS URLs to communicate with the Azure Active Directory. Changing this forces a new resource to be created.
         */
        ldapsUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The User Assigned Identity for the HDInsight Cluster. Changing this forces a new resource to be created.
         */
        msiResourceId: pulumi.Input<string>;
    }
    interface KafkaClusterStorageAccount {
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The Access Key which should be used to connect to the Storage Account. Changing this forces a new resource to be created.
         */
        storageAccountKey: pulumi.Input<string>;
        /**
         * The ID of the Storage Container. Changing this forces a new resource to be created.
         *
         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
         */
        storageContainerId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId?: pulumi.Input<string>;
    }
    interface KafkaClusterStorageAccountGen2 {
        /**
         * The ID of the Gen2 Filesystem. Changing this forces a new resource to be created.
         */
        filesystemId: pulumi.Input<string>;
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The ID of Managed Identity to use for accessing the Gen2 filesystem. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
         */
        managedIdentityResourceId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId: pulumi.Input<string>;
    }
    interface SparkClusterComponentVersion {
        /**
         * The version of Spark which should be used for this HDInsight Spark Cluster. Changing this forces a new resource to be created.
         */
        spark: pulumi.Input<string>;
    }
    interface SparkClusterComputeIsolation {
        /**
         * This field indicates whether enable compute isolation or not. Possible values are `true` or `false`.
         */
        computeIsolationEnabled?: pulumi.Input<boolean>;
        /**
         * The name of the host SKU.
         */
        hostSku?: pulumi.Input<string>;
    }
    interface SparkClusterDiskEncryption {
        /**
         * This is an algorithm identifier for encryption. Possible values are `RSA1_5`, `RSA-OAEP`, `RSA-OAEP-256`.
         */
        encryptionAlgorithm?: pulumi.Input<string>;
        /**
         * This is indicator to show whether resource disk encryption is enabled.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the key vault key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * This is the resource ID of Managed Identity used to access the key vault.
         */
        keyVaultManagedIdentityId?: pulumi.Input<string>;
    }
    interface SparkClusterExtension {
        /**
         * The workspace ID of the log analytics extension.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The workspace key of the log analytics extension.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface SparkClusterGateway {
        /**
         * The password used for the Ambari Portal.
         *
         * > **Note:** This password must be different from the one used for the `headNode`, `workerNode` and `zookeeperNode` roles.
         */
        password: pulumi.Input<string>;
        /**
         * The username used for the Ambari Portal. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface SparkClusterMetastores {
        /**
         * An `ambari` block as defined below.
         */
        ambari?: pulumi.Input<inputs.hdinsight.SparkClusterMetastoresAmbari>;
        /**
         * A `hive` block as defined below.
         */
        hive?: pulumi.Input<inputs.hdinsight.SparkClusterMetastoresHive>;
        /**
         * An `oozie` block as defined below.
         */
        oozie?: pulumi.Input<inputs.hdinsight.SparkClusterMetastoresOozie>;
    }
    interface SparkClusterMetastoresAmbari {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Ambari metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Ambari metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface SparkClusterMetastoresHive {
        /**
         * The external Hive metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Hive metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Hive metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface SparkClusterMetastoresOozie {
        /**
         * The external Oozie metastore's existing SQL database. Changing this forces a new resource to be created.
         */
        databaseName: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin password. Changing this forces a new resource to be created.
         */
        password: pulumi.Input<string>;
        /**
         * The fully-qualified domain name (FQDN) of the SQL server to use for the external Oozie metastore. Changing this forces a new resource to be created.
         */
        server: pulumi.Input<string>;
        /**
         * The external Oozie metastore's existing SQL server admin username. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
    }
    interface SparkClusterMonitor {
        /**
         * The Operations Management Suite (OMS) workspace ID.
         */
        logAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * The Operations Management Suite (OMS) workspace key.
         */
        primaryKey: pulumi.Input<string>;
    }
    interface SparkClusterNetwork {
        /**
         * The direction of the resource provider connection. Possible values include `Inbound` or `Outbound`. Defaults to `Inbound`. Changing this forces a new resource to be created.
         *
         * > **Note:** To enabled the private link the `connectionDirection` must be set to `Outbound`.
         */
        connectionDirection?: pulumi.Input<string>;
        /**
         * Is the private link enabled? Possible values include `true` or `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        privateLinkEnabled?: pulumi.Input<boolean>;
    }
    interface SparkClusterPrivateLinkConfiguration {
        /**
         * The ID of the private link service group.
         */
        groupId: pulumi.Input<string>;
        /**
         * An `ipConfiguration` block as defined below.
         */
        ipConfiguration: pulumi.Input<inputs.hdinsight.SparkClusterPrivateLinkConfigurationIpConfiguration>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface SparkClusterPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates whether this IP configuration is primary.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The private IP address of the IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The private IP allocation method. Possible values are `Dynamic` and `Static`.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The ID of the Subnet within the Virtual Network where the IP configuration should be provisioned.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface SparkClusterRoles {
        /**
         * A `headNode` block as defined above.
         */
        headNode: pulumi.Input<inputs.hdinsight.SparkClusterRolesHeadNode>;
        /**
         * A `workerNode` block as defined below.
         */
        workerNode: pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNode>;
        /**
         * A `zookeeperNode` block as defined below.
         */
        zookeeperNode: pulumi.Input<inputs.hdinsight.SparkClusterRolesZookeeperNode>;
    }
    interface SparkClusterRolesHeadNode {
        /**
         * The Password associated with the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined below. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.SparkClusterRolesHeadNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Head Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Head Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Head Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Head Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface SparkClusterRolesHeadNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface SparkClusterRolesWorkerNode {
        /**
         * A `autoscale` block as defined below.
         */
        autoscale?: pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNodeAutoscale>;
        /**
         * The Password associated with the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Worker Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The number of instances which should be run for the Worker Nodes.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The Username of the local administrator for the Worker Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Worker Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Worker Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface SparkClusterRolesWorkerNodeAutoscale {
        /**
         * A `capacity` block as defined below.
         */
        capacity?: pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNodeAutoscaleCapacity>;
        /**
         * A `recurrence` block as defined below.
         *
         * > **Note:** Either a `capacity` or `recurrence` block must be specified - but not both.
         */
        recurrence?: pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNodeAutoscaleRecurrence>;
    }
    interface SparkClusterRolesWorkerNodeAutoscaleCapacity {
        /**
         * The maximum number of worker nodes to autoscale to based on the cluster's activity.
         */
        maxInstanceCount: pulumi.Input<number>;
        /**
         * The minimum number of worker nodes to autoscale to based on the cluster's activity.
         */
        minInstanceCount: pulumi.Input<number>;
    }
    interface SparkClusterRolesWorkerNodeAutoscaleRecurrence {
        /**
         * A list of `schedule` blocks as defined below.
         */
        schedules: pulumi.Input<pulumi.Input<inputs.hdinsight.SparkClusterRolesWorkerNodeAutoscaleRecurrenceSchedule>[]>;
        /**
         * The time zone for the autoscale schedule times.
         */
        timezone: pulumi.Input<string>;
    }
    interface SparkClusterRolesWorkerNodeAutoscaleRecurrenceSchedule {
        /**
         * The days of the week to perform autoscale. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        days: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of worker nodes to autoscale at the specified time.
         */
        targetInstanceCount: pulumi.Input<number>;
        /**
         * The time of day to perform the autoscale in 24hour format.
         */
        time: pulumi.Input<string>;
    }
    interface SparkClusterRolesWorkerNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface SparkClusterRolesZookeeperNode {
        /**
         * The Password associated with the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** If specified, this password must be at least 10 characters in length and must contain at least one digit, one uppercase and one lower case letter, one non-alphanumeric character (except characters ' " ` \).
         */
        password?: pulumi.Input<string>;
        /**
         * The script action which will run on the cluster. One or more `scriptActions` blocks as defined above. Changing this forces a new resource to be created.
         */
        scriptActions?: pulumi.Input<pulumi.Input<inputs.hdinsight.SparkClusterRolesZookeeperNodeScriptAction>[]>;
        /**
         * A list of SSH Keys which should be used for the local administrator on the Zookeeper Nodes. Changing this forces a new resource to be created.
         *
         * > **Note:** Either a `password` or one or more `sshKeys` must be specified - but not both.
         */
        sshKeys?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet within the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * The Username of the local administrator for the Zookeeper Nodes. Changing this forces a new resource to be created.
         */
        username: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network where the Zookeeper Nodes should be provisioned within. Changing this forces a new resource to be created.
         */
        virtualNetworkId?: pulumi.Input<string>;
        /**
         * The Size of the Virtual Machine which should be used as the Zookeeper Nodes. Possible values are `ExtraSmall`, `Small`, `Medium`, `Large`, `ExtraLarge`, `A5`, `A6`, `A7`, `A8`, `A9`, `A10`, `A11`, `Standard_A1_V2`, `Standard_A2_V2`, `Standard_A2m_V2`, `Standard_A3`, `Standard_A4_V2`, `Standard_A4m_V2`, `Standard_A8_V2`, `Standard_A8m_V2`, `Standard_D1`, `Standard_D2`, `Standard_D3`, `Standard_D4`, `Standard_D11`, `Standard_D12`, `Standard_D13`, `Standard_D14`, `Standard_D1_V2`, `Standard_D2_V2`, `Standard_D3_V2`, `Standard_D4_V2`, `Standard_D5_V2`, `Standard_D11_V2`, `Standard_D12_V2`, `Standard_D13_V2`, `Standard_D14_V2`, `Standard_DS1_V2`, `Standard_DS2_V2`, `Standard_DS3_V2`, `Standard_DS4_V2`, `Standard_DS5_V2`, `Standard_DS11_V2`, `Standard_DS12_V2`, `Standard_DS13_V2`, `Standard_DS14_V2`, `Standard_E2_V3`, `Standard_E4_V3`, `Standard_E8_V3`, `Standard_E16_V3`, `Standard_E20_V3`, `Standard_E32_V3`, `Standard_E64_V3`, `Standard_E64i_V3`, `Standard_E2s_V3`, `Standard_E4s_V3`, `Standard_E8s_V3`, `Standard_E16s_V3`, `Standard_E20s_V3`, `Standard_E32s_V3`, `Standard_E64s_V3`, `Standard_E64is_V3`, `Standard_D2a_V4`, `Standard_D4a_V4`, `Standard_D8a_V4`, `Standard_D16a_V4`, `Standard_D32a_V4`, `Standard_D48a_V4`, `Standard_D64a_V4`, `Standard_D96a_V4`, `Standard_E2a_V4`, `Standard_E4a_V4`, `Standard_E8a_V4`, `Standard_E16a_V4`, `Standard_E20a_V4`, `Standard_E32a_V4`, `Standard_E48a_V4`, `Standard_E64a_V4`, `Standard_E96a_V4`, `Standard_D2ads_V5`, `Standard_D4ads_V5`, `Standard_D8ads_V5`, `Standard_D16ads_V5`, `Standard_D32ads_V5`, `Standard_D48ads_V5`, `Standard_D64ads_V5`, `Standard_D96ads_V5`, `Standard_E2ads_V5`, `Standard_E4ads_V5`, `Standard_E8ads_V5`, `Standard_E16ads_V5`, `Standard_E20ads_V5`, `Standard_E32ads_V5`, `Standard_E48ads_V5`, `Standard_E64ads_V5`, `Standard_E96ads_V5`, `Standard_G1`, `Standard_G2`, `Standard_G3`, `Standard_G4`, `Standard_G5`, `Standard_F2s_V2`, `Standard_F4s_V2`, `Standard_F8s_V2`, `Standard_F16s_V2`, `Standard_F32s_V2`, `Standard_F64s_V2`, `Standard_F72s_V2`, `Standard_GS1`, `Standard_GS2`, `Standard_GS3`, `Standard_GS4`, `Standard_GS5` and `Standard_NC24`. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface SparkClusterRolesZookeeperNodeScriptAction {
        /**
         * The name of the script action.
         */
        name: pulumi.Input<string>;
        /**
         * The parameters for the script provided.
         */
        parameters?: pulumi.Input<string>;
        /**
         * The URI to the script.
         */
        uri: pulumi.Input<string>;
    }
    interface SparkClusterSecurityProfile {
        /**
         * The resource ID of the Azure Active Directory Domain Service. Changing this forces a new resource to be created.
         */
        aaddsResourceId: pulumi.Input<string>;
        /**
         * A list of the distinguished names for the cluster user groups. Changing this forces a new resource to be created.
         */
        clusterUsersGroupDns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainName: pulumi.Input<string>;
        /**
         * The user password of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUserPassword: pulumi.Input<string>;
        /**
         * The username of the Azure Active Directory Domain. Changing this forces a new resource to be created.
         */
        domainUsername: pulumi.Input<string>;
        /**
         * A list of the LDAPS URLs to communicate with the Azure Active Directory. Changing this forces a new resource to be created.
         */
        ldapsUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The User Assigned Identity for the HDInsight Cluster. Changing this forces a new resource to be created.
         */
        msiResourceId: pulumi.Input<string>;
    }
    interface SparkClusterStorageAccount {
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The Access Key which should be used to connect to the Storage Account. Changing this forces a new resource to be created.
         */
        storageAccountKey: pulumi.Input<string>;
        /**
         * The ID of the Storage Container. Changing this forces a new resource to be created.
         *
         * > **Note:** When the `azure.storage.Container` resource is created with `storageAccountName`, this can be obtained from the `id` of the `azure.storage.Container` resource. When the `azure.storage.Container` resource is created with `storageAccountId`, please use `azure.storage.getContainers` data source to get the `dataPlaneId` of the `azure.storage.Container` resource for this field.
         */
        storageContainerId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId?: pulumi.Input<string>;
    }
    interface SparkClusterStorageAccountGen2 {
        /**
         * The ID of the Gen2 Filesystem. Changing this forces a new resource to be created.
         */
        filesystemId: pulumi.Input<string>;
        /**
         * Is this the Default Storage Account for the HDInsight Hadoop Cluster? Changing this forces a new resource to be created.
         *
         * > **Note:** One of the `storageAccount` or `storageAccountGen2` blocks must be marked as the default.
         */
        isDefault: pulumi.Input<boolean>;
        /**
         * The ID of Managed Identity to use for accessing the Gen2 filesystem. Changing this forces a new resource to be created.
         *
         * > **Note:** This can be obtained from the `id` of the `azure.storage.Container` resource.
         */
        managedIdentityResourceId: pulumi.Input<string>;
        /**
         * The ID of the Storage Account. Changing this forces a new resource to be created.
         */
        storageResourceId: pulumi.Input<string>;
    }
}
export declare namespace healthcare {
    interface DicomServiceAuthentication {
        /**
         * The intended audience to receive authentication tokens for the service. The default value is <https://dicom.azurehealthcareapis.azure.com>
         */
        audiences?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Azure Active Directory (tenant) that serves as the authentication authority to access the service. The default authority is the Directory defined in the authentication scheme in use when running Terraform.
         * Authority must be registered to Azure AD and in the following format: <https://{Azure-AD-endpoint}/{tenant-id>}.
         */
        authority?: pulumi.Input<string>;
    }
    interface DicomServiceCors {
        /**
         * Whether to allow credentials in CORS. Defaults to `false`.
         */
        allowCredentials?: pulumi.Input<boolean>;
        /**
         * A list of allowed headers for CORS.
         */
        allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed methods for CORS.
         */
        allowedMethods?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed origins for CORS.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The maximum age in seconds for the CORS configuration (must be between 0 and 99998 inclusive).
         */
        maxAgeInSeconds?: pulumi.Input<number>;
    }
    interface DicomServiceIdentity {
        /**
         * A list of User Assigned Identity IDs which should be assigned to this Healthcare DICOM service.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of identity used for the Healthcare DICOM service. Possible values are `UserAssigned`, `SystemAssigned` and `SystemAssigned, UserAssigned`. If `UserAssigned` is set, an `identityIds` must be set as well.
         */
        type: pulumi.Input<string>;
    }
    interface DicomServicePrivateEndpoint {
        /**
         * The ID of the Healthcare DICOM Service.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the Healthcare DICOM Service. Changing this forces a new Healthcare DICOM Service to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface DicomServiceStorage {
        /**
         * The filesystem name of connected storage account. Changing this forces a new Healthcare DICOM Service to be created.
         */
        fileSystemName: pulumi.Input<string>;
        /**
         * The resource ID of connected storage account. Changing this forces a new Healthcare DICOM Service to be created.
         *
         * > **Note:** The `isHnsEnabled` needs to be set to `true` for the storage account to be used with the Healthcare DICOM Service.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface FhirServiceAuthentication {
        /**
         * The intended audience to receive authentication tokens for the service.
         */
        audience: pulumi.Input<string>;
        /**
         * The Azure Active Directory (tenant) that serves as the authentication authority to access the service. The default authority is the Directory defined in the authentication scheme in use when running Terraform.
         * Authority must be registered to Azure AD and in the following format: <https://{Azure-AD-endpoint}/{tenant-id>}.
         */
        authority: pulumi.Input<string>;
        /**
         * Whether smart proxy is enabled.
         */
        smartProxyEnabled?: pulumi.Input<boolean>;
    }
    interface FhirServiceCors {
        /**
         * A set of headers to be allowed via CORS.
         */
        allowedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The methods to be allowed via CORS. Possible values are `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PATCH` and `PUT`.
         */
        allowedMethods: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A set of origins to be allowed via CORS.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * If credentials are allowed via CORS.
         */
        credentialsAllowed?: pulumi.Input<boolean>;
        /**
         * The max age to be allowed via CORS.
         */
        maxAgeInSeconds?: pulumi.Input<number>;
    }
    interface FhirServiceIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign. Required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of managed identity to assign. Possible values are `UserAssigned` and `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface FhirServiceOciArtifact {
        /**
         * A digest of an image within Azure container registry used for export operations of the service instance to narrow the artifacts down.
         */
        digest?: pulumi.Input<string>;
        /**
         * An image within Azure container registry used for export operations of the service instance.
         */
        imageName?: pulumi.Input<string>;
        /**
         * An Azure container registry used for export operations of the service instance.
         */
        loginServer: pulumi.Input<string>;
    }
    interface MedtechServiceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Healthcare Med Tech Service.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this System Assigned Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this System Assigned Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Healthcare Med Tech Service. Possible values are `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ServiceAuthenticationConfiguration {
        /**
         * The intended audience to receive authentication tokens for the service. The default value is https://azurehealthcareapis.com
         */
        audience?: pulumi.Input<string>;
        /**
         * The Azure Active Directory (tenant) that serves as the authentication authority to access the service. The default authority is the Directory defined in the authentication scheme in use when running this provider.
         * Authority must be registered to Azure AD and in the following format: https://{Azure-AD-endpoint}/{tenant-id}.
         */
        authority?: pulumi.Input<string>;
        /**
         * (Boolean) Enables the 'SMART on FHIR' option for mobile and web implementations.
         */
        smartProxyEnabled?: pulumi.Input<boolean>;
    }
    interface ServiceCorsConfiguration {
        /**
         * (Boolean) If credentials are allowed via CORS.
         */
        allowCredentials?: pulumi.Input<boolean>;
        /**
         * A set of headers to be allowed via CORS.
         */
        allowedHeaders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The methods to be allowed via CORS. Possible values are `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PATCH` and `PUT`.
         */
        allowedMethods?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A set of origins to be allowed via CORS.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The max age to be allowed via CORS.
         */
        maxAgeInSeconds?: pulumi.Input<number>;
    }
    interface ServiceIdentity {
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of managed identity to assign. The only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface WorkspacePrivateEndpointConnection {
        /**
         * The ID of the Healthcare Workspace.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the name of the Healthcare Workspace. Changing this forces a new Healthcare Workspace to be created.
         */
        name?: pulumi.Input<string>;
    }
}
export declare namespace hpc {
    interface CacheAccessPolicyAccessRule {
        /**
         * The access level for this rule. Possible values are: `rw`, `ro`, `no`.
         */
        access: pulumi.Input<string>;
        /**
         * The anonymous GID used when `rootSquashEnabled` is `true`.
         */
        anonymousGid?: pulumi.Input<number>;
        /**
         * The anonymous UID used when `rootSquashEnabled` is `true`.
         */
        anonymousUid?: pulumi.Input<number>;
        /**
         * The filter applied to the `scope` for this rule. The filter's format depends on its scope: `default` scope matches all clients and has no filter value; `network` scope takes a CIDR format; `host` takes an IP address or fully qualified domain name. If a client does not match any filter rule and there is no default rule, access is denied.
         */
        filter?: pulumi.Input<string>;
        /**
         * Whether to enable [root squash](https://docs.microsoft.com/azure/hpc-cache/access-policies#root-squash)?
         */
        rootSquashEnabled?: pulumi.Input<boolean>;
        /**
         * The scope of this rule. The `scope` and (potentially) the `filter` determine which clients match the rule. Possible values are: `default`, `network`, `host`.
         *
         * > **Note:** Each `accessRule` should set a unique `scope`.
         */
        scope: pulumi.Input<string>;
        /**
         * Whether allow access to subdirectories under the root export?
         */
        submountAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Whether [SUID](https://docs.microsoft.com/azure/hpc-cache/access-policies#suid) is allowed?
         */
        suidEnabled?: pulumi.Input<boolean>;
    }
    interface CacheDefaultAccessPolicy {
        /**
         * One or more `accessRule` blocks (up to three) as defined above.
         */
        accessRules: pulumi.Input<pulumi.Input<inputs.hpc.CacheDefaultAccessPolicyAccessRule>[]>;
    }
    interface CacheDefaultAccessPolicyAccessRule {
        /**
         * The access level for this rule. Possible values are: `rw`, `ro`, `no`.
         */
        access: pulumi.Input<string>;
        /**
         * The anonymous GID used when `rootSquashEnabled` is `true`.
         */
        anonymousGid?: pulumi.Input<number>;
        /**
         * The anonymous UID used when `rootSquashEnabled` is `true`.
         */
        anonymousUid?: pulumi.Input<number>;
        /**
         * The filter applied to the `scope` for this rule. The filter's format depends on its scope: `default` scope matches all clients and has no filter value; `network` scope takes a CIDR format; `host` takes an IP address or fully qualified domain name. If a client does not match any filter rule and there is no default rule, access is denied.
         */
        filter?: pulumi.Input<string>;
        /**
         * Whether to enable [root squash](https://docs.microsoft.com/azure/hpc-cache/access-policies#root-squash)?
         */
        rootSquashEnabled?: pulumi.Input<boolean>;
        /**
         * The scope of this rule. The `scope` and (potentially) the `filter` determine which clients match the rule. Possible values are: `default`, `network`, `host`.
         *
         * > **Note:** Each `accessRule` should set a unique `scope`.
         */
        scope: pulumi.Input<string>;
        /**
         * Whether allow access to subdirectories under the root export?
         */
        submountAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Whether [SUID](https://docs.microsoft.com/azure/hpc-cache/access-policies#suid) is allowed?
         */
        suidEnabled?: pulumi.Input<boolean>;
    }
    interface CacheDirectoryActiveDirectory {
        /**
         * The NetBIOS name to assign to the HPC Cache when it joins the Active Directory domain as a server.
         */
        cacheNetbiosName: pulumi.Input<string>;
        /**
         * The primary DNS IP address used to resolve the Active Directory domain controller's FQDN.
         */
        dnsPrimaryIp: pulumi.Input<string>;
        /**
         * The secondary DNS IP address used to resolve the Active Directory domain controller's FQDN.
         */
        dnsSecondaryIp?: pulumi.Input<string>;
        /**
         * The fully qualified domain name of the Active Directory domain controller.
         */
        domainName: pulumi.Input<string>;
        /**
         * The Active Directory domain's NetBIOS name.
         */
        domainNetbiosName: pulumi.Input<string>;
        /**
         * The password of the Active Directory domain administrator.
         */
        password: pulumi.Input<string>;
        /**
         * The username of the Active Directory domain administrator.
         */
        username: pulumi.Input<string>;
    }
    interface CacheDirectoryFlatFile {
        /**
         * The URI of the file containing group information (`/etc/group` file format in Unix-like OS).
         */
        groupFileUri: pulumi.Input<string>;
        /**
         * The URI of the file containing user information (`/etc/passwd` file format in Unix-like OS).
         */
        passwordFileUri: pulumi.Input<string>;
    }
    interface CacheDirectoryLdap {
        /**
         * The base distinguished name (DN) for the LDAP domain.
         */
        baseDn: pulumi.Input<string>;
        /**
         * A `bind` block as defined above.
         */
        bind?: pulumi.Input<inputs.hpc.CacheDirectoryLdapBind>;
        /**
         * The URI of the CA certificate to validate the LDAP secure connection.
         */
        certificateValidationUri?: pulumi.Input<string>;
        /**
         * Whether the certificate should be automatically downloaded. This can be set to `true` only when `certificateValidationUri` is provided.
         */
        downloadCertificateAutomatically?: pulumi.Input<boolean>;
        /**
         * Whether the LDAP connection should be encrypted?
         */
        encrypted?: pulumi.Input<boolean>;
        /**
         * The FQDN or IP address of the LDAP server.
         */
        server: pulumi.Input<string>;
    }
    interface CacheDirectoryLdapBind {
        /**
         * The Bind Distinguished Name (DN) identity to be used in the secure LDAP connection.
         */
        dn: pulumi.Input<string>;
        /**
         * The Bind password to be used in the secure LDAP connection.
         */
        password: pulumi.Input<string>;
    }
    interface CacheDns {
        /**
         * The DNS search domain for the HPC Cache.
         */
        searchDomain?: pulumi.Input<string>;
        /**
         * A list of DNS servers for the HPC Cache. At most three IP(s) are allowed to set.
         */
        servers: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface CacheIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this HPC Cache. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this HPC Cache. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both). Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface CacheNfsTargetNamespaceJunction {
        /**
         * The name of the access policy applied to this target. Defaults to `default`.
         */
        accessPolicyName?: pulumi.Input<string>;
        /**
         * The client-facing file path of this NFS target within the HPC Cache NFS Target.
         */
        namespacePath: pulumi.Input<string>;
        /**
         * The NFS export of this NFS target within the HPC Cache NFS Target.
         */
        nfsExport: pulumi.Input<string>;
        /**
         * The relative subdirectory path from the `nfsExport` to map to the `namespacePath`. Defaults to `""`, in which case the whole `nfsExport` is exported.
         */
        targetPath?: pulumi.Input<string>;
    }
}
export declare namespace hsm {
    interface ModuleManagementNetworkProfile {
        /**
         * The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.
         */
        networkInterfacePrivateIpAddresses: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ModuleNetworkProfile {
        /**
         * The private IPv4 address of the network interface. Changing this forces a new Dedicated Hardware Security Module to be created.
         */
        networkInterfacePrivateIpAddresses: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the subnet. Changing this forces a new Dedicated Hardware Security Module to be created.
         */
        subnetId: pulumi.Input<string>;
    }
}
export declare namespace iot {
    interface IoTHubCloudToDevice {
        /**
         * The default time to live for cloud-to-device messages, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 1 minute and 48 hours. Defaults to `PT1H`.
         */
        defaultTtl?: pulumi.Input<string>;
        /**
         * A `feedback` block as defined below.
         */
        feedbacks?: pulumi.Input<pulumi.Input<inputs.iot.IoTHubCloudToDeviceFeedback>[]>;
        /**
         * The maximum delivery count for cloud-to-device per-device queues. This value must be between `1` and `100`. Defaults to `10`.
         */
        maxDeliveryCount?: pulumi.Input<number>;
    }
    interface IoTHubCloudToDeviceFeedback {
        /**
         * The lock duration for the feedback queue, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 5 and 300 seconds. Defaults to `PT60S`.
         */
        lockDuration?: pulumi.Input<string>;
        /**
         * The maximum delivery count for the feedback queue. This value must be between `1` and `100`. Defaults to `10`.
         */
        maxDeliveryCount?: pulumi.Input<number>;
        /**
         * The retention time for service-bound feedback messages, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 1 minute and 48 hours. Defaults to `PT1H`.
         */
        timeToLive?: pulumi.Input<string>;
    }
    interface IoTHubEndpoint {
        /**
         * The type used to authenticate against the endpoint. Possible values are `keyBased` and `identityBased`. Defaults to `keyBased`.
         */
        authenticationType?: pulumi.Input<string>;
        /**
         * Time interval at which blobs are written to storage. Value should be between 60 and 720 seconds. Default value is 300 seconds. This attribute is applicable for endpoint type `AzureIotHub.StorageContainer`.
         */
        batchFrequencyInSeconds?: pulumi.Input<number>;
        /**
         * The connection string for the endpoint. This attribute is mandatory and can only be specified when `authenticationType` is `keyBased`.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The name of storage container in the storage account. This attribute is mandatory for endpoint type `AzureIotHub.StorageContainer`.
         */
        containerName?: pulumi.Input<string>;
        /**
         * Encoding that is used to serialize messages to blobs. Supported values are `Avro`, `AvroDeflate` and `JSON`. Default value is `Avro`. This attribute is applicable for endpoint type `AzureIotHub.StorageContainer`. Changing this forces a new resource to be created.
         */
        encoding?: pulumi.Input<string>;
        /**
         * URI of the Service Bus or Event Hubs Namespace endpoint. This attribute can only be specified and is mandatory when `authenticationType` is `identityBased` for endpoint type `AzureIotHub.ServiceBusQueue`, `AzureIotHub.ServiceBusTopic` or `AzureIotHub.EventHub`.
         */
        endpointUri?: pulumi.Input<string>;
        /**
         * Name of the Service Bus Queue/Topic or Event Hub. This attribute can only be specified and is mandatory when `authenticationType` is `identityBased` for endpoint type `AzureIotHub.ServiceBusQueue`, `AzureIotHub.ServiceBusTopic` or `AzureIotHub.EventHub`.
         */
        entityPath?: pulumi.Input<string>;
        /**
         * File name format for the blob. All parameters are mandatory but can be reordered. This attribute is applicable for endpoint type `AzureIotHub.StorageContainer`. Defaults to `{iothub}/{partition}/{YYYY}/{MM}/{DD}/{HH}/{mm}`.
         */
        fileNameFormat?: pulumi.Input<string>;
        /**
         * The ID of the User Managed Identity used to authenticate against the endpoint.
         *
         * > **Note:** `identityId` can only be specified when `authenticationType` is `identityBased`. It must be one of the `identityIds` of the IoT Hub. If `identityId` is omitted when `authenticationType` is `identityBased`, then the System-Assigned Managed Identity of the IoT Hub will be used.
         *
         * > **Note:** An IoT Hub can only be updated to use the System-Assigned Managed Identity for `endpoint` since it is not possible to grant access to the endpoint until after creation. The extracted resources `azurerm_iothub_endpoint_*` can be used to configure Endpoints with the IoT Hub's System-Assigned Managed Identity without the need for an update.
         */
        identityId?: pulumi.Input<string>;
        /**
         * Maximum number of bytes for each blob written to storage. Value should be between 10485760(10MB) and 524288000(500MB). Default value is 314572800(300MB). This attribute is applicable for endpoint type `AzureIotHub.StorageContainer`.
         */
        maxChunkSizeInBytes?: pulumi.Input<number>;
        /**
         * The name of the endpoint. The name must be unique across endpoint types. The following names are reserved: `events`, `operationsMonitoringEvents`, `fileNotifications` and `$default`.
         */
        name: pulumi.Input<string>;
        /**
         * The resource group in which the endpoint will be created.
         */
        resourceGroupName?: pulumi.Input<string>;
        /**
         * The subscription ID for the endpoint.
         *
         * > **Note:** When `subscriptionId` isn't specified it will be set to the subscription ID of the IoT Hub resource.
         */
        subscriptionId?: pulumi.Input<string>;
        /**
         * The type of the endpoint. Possible values are `AzureIotHub.StorageContainer`, `AzureIotHub.ServiceBusQueue`, `AzureIotHub.ServiceBusTopic` or `AzureIotHub.EventHub`.
         */
        type: pulumi.Input<string>;
    }
    interface IoTHubEnrichment {
        /**
         * The list of endpoints which will be enriched.
         */
        endpointNames: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The key of the enrichment.
         */
        key: pulumi.Input<string>;
        /**
         * The value of the enrichment. Value can be any static string, the name of the IoT Hub sending the message (use `$iothubname`) or information from the device twin (ex: `$twin.tags.latitude`)
         */
        value: pulumi.Input<string>;
    }
    interface IoTHubFallbackRoute {
        /**
         * The condition that is evaluated to apply the routing rule. Defaults to `true`. For grammar, see: <https://docs.microsoft.com/azure/iot-hub/iot-hub-devguide-query-language>.
         */
        condition?: pulumi.Input<string>;
        /**
         * Used to specify whether the fallback route is enabled. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The endpoints to which messages that satisfy the condition are routed. Currently only 1 endpoint is allowed.
         */
        endpointNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The source that the routing rule is to be applied to, such as `DeviceMessages`. Possible values include: `Invalid`, `DeviceMessages`, `TwinChangeEvents`, `DeviceLifecycleEvents`, `DeviceConnectionStateEvents`, `DeviceJobLifecycleEvents` and `DigitalTwinChangeEvents`. Defaults to `DeviceMessages`.
         */
        source?: pulumi.Input<string>;
    }
    interface IoTHubFileUpload {
        /**
         * The type used to authenticate against the storage account. Possible values are `keyBased` and `identityBased`. Defaults to `keyBased`.
         */
        authenticationType?: pulumi.Input<string>;
        /**
         * The connection string for the Azure Storage account to which files are uploaded.
         */
        connectionString: pulumi.Input<string>;
        /**
         * The name of the root container where the files should be uploaded to. The container need not exist but should be creatable using the connectionString specified.
         */
        containerName: pulumi.Input<string>;
        /**
         * The period of time for which a file upload notification message is available to consume before it expires, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 1 minute and 48 hours. Defaults to `PT1H`.
         */
        defaultTtl?: pulumi.Input<string>;
        /**
         * The ID of the User Managed Identity used to authenticate against the storage account.
         *
         * > **Note:** `identityId` can only be specified when `authenticationType` is `identityBased`. It must be one of the `identityIds` of the IoT Hub. If `identityId` is omitted when `authenticationType` is `identityBased`, then the System-Assigned Managed Identity of the IoT Hub will be used.
         *
         * > **Note:** An IoT Hub can only be updated to use the System-Assigned Managed Identity for `fileUpload` since it is not possible to grant access to the endpoint until after creation.
         */
        identityId?: pulumi.Input<string>;
        /**
         * The lock duration for the file upload notifications queue, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 5 and 300 seconds. Defaults to `PT1M`.
         */
        lockDuration?: pulumi.Input<string>;
        /**
         * The number of times the IoT Hub attempts to deliver a file upload notification message. Defaults to `10`.
         */
        maxDeliveryCount?: pulumi.Input<number>;
        /**
         * Used to specify whether file notifications are sent to IoT Hub on upload. Defaults to `false`.
         */
        notifications?: pulumi.Input<boolean>;
        /**
         * The period of time for which the SAS URI generated by IoT Hub for file upload is valid, specified as an [ISO 8601 timespan duration](https://en.wikipedia.org/wiki/ISO_8601#Durations). This value must be between 1 minute and 24 hours. Defaults to `PT1H`.
         */
        sasTtl?: pulumi.Input<string>;
    }
    interface IoTHubIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this IoT Hub.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this IoT Hub. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface IoTHubNetworkRuleSet {
        /**
         * Determines if Network Rule Set is also applied to the BuiltIn EventHub EndPoint of the IotHub. Defaults to `false`.
         */
        applyToBuiltinEventhubEndpoint?: pulumi.Input<boolean>;
        /**
         * Default Action for Network Rule Set. Possible values are `DefaultActionDeny`, `DefaultActionAllow`. Defaults to `DefaultActionDeny`.
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more `ipRule` blocks as defined below.
         */
        ipRules?: pulumi.Input<pulumi.Input<inputs.iot.IoTHubNetworkRuleSetIpRule>[]>;
    }
    interface IoTHubNetworkRuleSetIpRule {
        /**
         * The desired action for requests captured by this rule. Possible values are `Allow`. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The IP address range in CIDR notation for the ip rule.
         */
        ipMask: pulumi.Input<string>;
        /**
         * The name of the ip rule.
         */
        name: pulumi.Input<string>;
    }
    interface IoTHubRoute {
        /**
         * The condition that is evaluated to apply the routing rule. Defaults to `true`. For grammar, see: <https://docs.microsoft.com/azure/iot-hub/iot-hub-devguide-query-language>.
         */
        condition?: pulumi.Input<string>;
        /**
         * Used to specify whether a route is enabled.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * The list of endpoints to which messages that satisfy the condition are routed.
         */
        endpointNames: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the route.
         */
        name: pulumi.Input<string>;
        /**
         * The source that the routing rule is to be applied to, such as `DeviceMessages`. Possible values include: `Invalid`, `DeviceMessages`, `TwinChangeEvents`, `DeviceLifecycleEvents`, `DeviceConnectionStateEvents`, `DeviceJobLifecycleEvents` and `DigitalTwinChangeEvents`.
         */
        source: pulumi.Input<string>;
    }
    interface IoTHubSharedAccessPolicy {
        /**
         * The name of the shared access policy.
         */
        keyName?: pulumi.Input<string>;
        /**
         * The permissions assigned to the shared access policy.
         */
        permissions?: pulumi.Input<string>;
        /**
         * The primary key.
         */
        primaryKey?: pulumi.Input<string>;
        /**
         * The secondary key.
         */
        secondaryKey?: pulumi.Input<string>;
    }
    interface IoTHubSku {
        /**
         * The number of provisioned IoT Hub units.
         *
         * > **Note:** Only one IotHub can be on the `Free` tier per subscription.
         */
        capacity: pulumi.Input<number>;
        /**
         * The name of the sku. Possible values are `B1`, `B2`, `B3`, `F1`, `S1`, `S2`, and `S3`.
         *
         * > **Note:** The `F1` sku is on `Free` tier.
         */
        name: pulumi.Input<string>;
    }
    interface IotHubDeviceUpdateAccountIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this IoT Hub Device Update Account.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this IoT Hub Device Update Account.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this IoT Hub Device Update Account.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this IoT Hub Device Update Account. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface IotHubDeviceUpdateInstanceDiagnosticStorageAccount {
        /**
         * Connection String of the Diagnostic Storage Account.
         */
        connectionString: pulumi.Input<string>;
        /**
         * Resource ID of the Diagnostic Storage Account.
         */
        id: pulumi.Input<string>;
    }
    interface IotHubDpsIpFilterRule {
        /**
         * The desired action for requests captured by this rule. Possible values are `Accept`, `Reject`
         */
        action: pulumi.Input<string>;
        /**
         * The IP address range in CIDR notation for the rule.
         */
        ipMask: pulumi.Input<string>;
        /**
         * The name of the filter.
         */
        name: pulumi.Input<string>;
        /**
         * Target for requests captured by this rule. Possible values are `all`, `deviceApi` and `serviceApi`.
         */
        target?: pulumi.Input<string>;
    }
    interface IotHubDpsLinkedHub {
        /**
         * The weight applied to the IoT Hub. Defaults to `1`.
         */
        allocationWeight?: pulumi.Input<number>;
        /**
         * Determines whether to apply allocation policies to the IoT Hub. Defaults to `true`.
         */
        applyAllocationPolicy?: pulumi.Input<boolean>;
        /**
         * The connection string to connect to the IoT Hub.
         */
        connectionString: pulumi.Input<string>;
        /**
         * The IoT Hub hostname.
         */
        hostname?: pulumi.Input<string>;
        /**
         * The location of the IoT hub.
         */
        location: pulumi.Input<string>;
    }
    interface IotHubDpsSku {
        /**
         * The number of provisioned IoT Device Provisioning Service units.
         */
        capacity: pulumi.Input<number>;
        /**
         * The name of the sku. Currently can only be set to `S1`.
         */
        name: pulumi.Input<string>;
    }
    interface SecurityDeviceGroupAllowRule {
        /**
         * Specifies which IP is not allowed to be connected to in current device group for inbound connection.
         */
        connectionFromIpsNotAlloweds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies which IP is not allowed to be connected to in current device group for outbound connection.
         */
        connectionToIpsNotAlloweds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies which local user is not allowed to login in current device group.
         */
        localUsersNotAlloweds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies which process is not allowed to be executed in current device group.
         */
        processesNotAlloweds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SecurityDeviceGroupRangeRule {
        /**
         * Specifies the time range. represented in ISO 8601 duration format.
         */
        duration: pulumi.Input<string>;
        /**
         * The maximum threshold in the given time window.
         */
        max: pulumi.Input<number>;
        /**
         * The minimum threshold in the given time window.
         */
        min: pulumi.Input<number>;
        /**
         * The type of supported rule type. Possible Values are `ActiveConnectionsNotInAllowedRange`, `AmqpC2DMessagesNotInAllowedRange`, `MqttC2DMessagesNotInAllowedRange`, `HttpC2DMessagesNotInAllowedRange`, `AmqpC2DRejectedMessagesNotInAllowedRange`, `MqttC2DRejectedMessagesNotInAllowedRange`, `HttpC2DRejectedMessagesNotInAllowedRange`, `AmqpD2CMessagesNotInAllowedRange`, `MqttD2CMessagesNotInAllowedRange`, `HttpD2CMessagesNotInAllowedRange`, `DirectMethodInvokesNotInAllowedRange`, `FailedLocalLoginsNotInAllowedRange`, `FileUploadsNotInAllowedRange`, `QueuePurgesNotInAllowedRange`, `TwinUpdatesNotInAllowedRange` and `UnauthorizedOperationsNotInAllowedRange`.
         */
        type: pulumi.Input<string>;
    }
    interface SecuritySolutionAdditionalWorkspace {
        /**
         * A list of data types which sent to workspace. Possible values are `Alerts` and `RawEvents`.
         */
        dataTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The resource ID of the Log Analytics Workspace.
         */
        workspaceId: pulumi.Input<string>;
    }
    interface SecuritySolutionRecommendationsEnabled {
        /**
         * Is Principal Authentication enabled for the ACR repository? Defaults to `true`.
         */
        acrAuthentication?: pulumi.Input<boolean>;
        /**
         * Is Agent send underutilized messages enabled? Defaults to `true`.
         */
        agentSendUnutilizedMsg?: pulumi.Input<boolean>;
        /**
         * Is Security related system configuration issues identified? Defaults to `true`.
         */
        baseline?: pulumi.Input<boolean>;
        /**
         * Is IoT Edge Hub memory optimized? Defaults to `true`.
         */
        edgeHubMemOptimize?: pulumi.Input<boolean>;
        /**
         * Is logging configured for IoT Edge module? Defaults to `true`.
         */
        edgeLoggingOption?: pulumi.Input<boolean>;
        /**
         * Is inconsistent module settings enabled for SecurityGroup? Defaults to `true`.
         */
        inconsistentModuleSettings?: pulumi.Input<boolean>;
        /**
         * is Azure IoT Security agent installed? Defaults to `true`.
         */
        installAgent?: pulumi.Input<boolean>;
        /**
         * Is Default IP filter policy denied? Defaults to `true`.
         */
        ipFilterDenyAll?: pulumi.Input<boolean>;
        /**
         * Is IP filter rule source allowable IP range too large? Defaults to `true`.
         */
        ipFilterPermissiveRule?: pulumi.Input<boolean>;
        /**
         * Is any ports open on the device? Defaults to `true`.
         */
        openPorts?: pulumi.Input<boolean>;
        /**
         * Does firewall policy exist which allow necessary communication to/from the device? Defaults to `true`.
         */
        permissiveFirewallPolicy?: pulumi.Input<boolean>;
        /**
         * Is only necessary addresses or ports are permitted in? Defaults to `true`.
         */
        permissiveInputFirewallRules?: pulumi.Input<boolean>;
        /**
         * Is only necessary addresses or ports are permitted out? Defaults to `true`.
         */
        permissiveOutputFirewallRules?: pulumi.Input<boolean>;
        /**
         * Is high level permissions are needed for the module? Defaults to `true`.
         */
        privilegedDockerOptions?: pulumi.Input<boolean>;
        /**
         * Is any credentials shared among devices? Defaults to `true`.
         */
        sharedCredentials?: pulumi.Input<boolean>;
        /**
         * Does TLS cipher suite need to be updated? Defaults to `true`.
         */
        vulnerableTlsCipherSuite?: pulumi.Input<boolean>;
    }
}
export declare namespace iotcentral {
    interface ApplicationIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this IoT Central Application. The only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ApplicationNetworkRuleSetIpRule {
        /**
         * The IP address range in CIDR notation for the IP Rule.
         */
        ipMask: pulumi.Input<string>;
        /**
         * The name of the IP Rule
         */
        name: pulumi.Input<string>;
    }
}
export declare namespace keyvault {
    interface CertifiateCertificate {
        /**
         * The base64-encoded certificate contents.
         */
        contents: pulumi.Input<string>;
        /**
         * The password associated with the certificate.
         *
         * > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
         *
         * To convert a private key to pkcs8 format with openssl use:
         * ```shell
         * openssl pkcs8 -topk8 -nocrypt -in private_key.pem > private_key_pk8.pem
         * ```
         *
         * The PEM content should look something like:
         * ```text
         * -----BEGIN CERTIFICATE-----
         * aGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8K
         * :
         * aGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8K
         * -----END CERTIFICATE-----
         * -----BEGIN PRIVATE KEY-----
         * d29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQK
         * :
         * d29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQK
         * -----END PRIVATE KEY-----
         * ```
         */
        password?: pulumi.Input<string>;
    }
    interface CertifiateCertificateAttribute {
        /**
         * The create time of the Key Vault Certificate.
         */
        created?: pulumi.Input<string>;
        /**
         * whether the Key Vault Certificate is enabled.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The expires time of the Key Vault Certificate.
         */
        expires?: pulumi.Input<string>;
        /**
         * The not before valid time of the Key Vault Certificate.
         */
        notBefore?: pulumi.Input<string>;
        /**
         * The deletion recovery level of the Key Vault Certificate.
         */
        recoveryLevel?: pulumi.Input<string>;
        /**
         * The recent update time of the Key Vault Certificate.
         */
        updated?: pulumi.Input<string>;
    }
    interface CertifiateCertificatePolicy {
        /**
         * A `issuerParameters` block as defined below.
         */
        issuerParameters: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyIssuerParameters>;
        /**
         * A `keyProperties` block as defined below.
         */
        keyProperties: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyKeyProperties>;
        /**
         * A `lifetimeAction` block as defined below.
         */
        lifetimeActions?: pulumi.Input<pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyLifetimeAction>[]>;
        /**
         * A `secretProperties` block as defined below.
         */
        secretProperties: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicySecretProperties>;
        /**
         * A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
         */
        x509CertificateProperties?: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyX509CertificateProperties>;
    }
    interface CertifiateCertificatePolicyIssuerParameters {
        /**
         * The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
         */
        name: pulumi.Input<string>;
    }
    interface CertifiateCertificatePolicyKeyProperties {
        /**
         * Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
         */
        curve?: pulumi.Input<string>;
        /**
         * Is this certificate exportable?
         */
        exportable: pulumi.Input<boolean>;
        /**
         * The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
         */
        keySize?: pulumi.Input<number>;
        /**
         * Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
         */
        keyType: pulumi.Input<string>;
        /**
         * Is the key reusable?
         */
        reuseKey: pulumi.Input<boolean>;
    }
    interface CertifiateCertificatePolicyLifetimeAction {
        /**
         * A `action` block as defined below.
         */
        action: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyLifetimeActionAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyLifetimeActionTrigger>;
    }
    interface CertifiateCertificatePolicyLifetimeActionAction {
        /**
         * The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
         */
        actionType: pulumi.Input<string>;
    }
    interface CertifiateCertificatePolicyLifetimeActionTrigger {
        /**
         * The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
         */
        daysBeforeExpiry?: pulumi.Input<number>;
        /**
         * The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
         */
        lifetimePercentage?: pulumi.Input<number>;
    }
    interface CertifiateCertificatePolicySecretProperties {
        /**
         * The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
         */
        contentType: pulumi.Input<string>;
    }
    interface CertifiateCertificatePolicyX509CertificateProperties {
        /**
         * A list of Extended/Enhanced Key Usages.
         */
        extendedKeyUsages?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
         */
        keyUsages: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Certificate's Subject.
         */
        subject: pulumi.Input<string>;
        /**
         * A `subjectAlternativeNames` block as defined below.
         */
        subjectAlternativeNames?: pulumi.Input<inputs.keyvault.CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames>;
        /**
         * The Certificates Validity Period in Months.
         */
        validityInMonths: pulumi.Input<number>;
    }
    interface CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames {
        /**
         * A list of alternative DNS names (FQDNs) identified by the Certificate.
         */
        dnsNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of email addresses identified by this Certificate.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of User Principal Names identified by the Certificate.
         */
        upns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface CertificateCertificate {
        /**
         * The base64-encoded certificate contents.
         */
        contents: pulumi.Input<string>;
        /**
         * The password associated with the certificate.
         *
         * > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
         *
         * To convert a private key to pkcs8 format with openssl use:
         * ```shell
         * openssl pkcs8 -topk8 -nocrypt -in private_key.pem > private_key_pk8.pem
         * ```
         *
         * The PEM content should look something like:
         * ```text
         * -----BEGIN CERTIFICATE-----
         * aGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8K
         * :
         * aGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8KaGVsbG8K
         * -----END CERTIFICATE-----
         * -----BEGIN PRIVATE KEY-----
         * d29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQK
         * :
         * d29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQKd29ybGQK
         * -----END PRIVATE KEY-----
         * ```
         */
        password?: pulumi.Input<string>;
    }
    interface CertificateCertificateAttribute {
        /**
         * The create time of the Key Vault Certificate.
         */
        created?: pulumi.Input<string>;
        /**
         * whether the Key Vault Certificate is enabled.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The expires time of the Key Vault Certificate.
         */
        expires?: pulumi.Input<string>;
        /**
         * The not before valid time of the Key Vault Certificate.
         */
        notBefore?: pulumi.Input<string>;
        /**
         * The deletion recovery level of the Key Vault Certificate.
         */
        recoveryLevel?: pulumi.Input<string>;
        /**
         * The recent update time of the Key Vault Certificate.
         */
        updated?: pulumi.Input<string>;
    }
    interface CertificateCertificatePolicy {
        /**
         * A `issuerParameters` block as defined below.
         */
        issuerParameters: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyIssuerParameters>;
        /**
         * A `keyProperties` block as defined below.
         */
        keyProperties: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyKeyProperties>;
        /**
         * A `lifetimeAction` block as defined below.
         */
        lifetimeActions?: pulumi.Input<pulumi.Input<inputs.keyvault.CertificateCertificatePolicyLifetimeAction>[]>;
        /**
         * A `secretProperties` block as defined below.
         */
        secretProperties: pulumi.Input<inputs.keyvault.CertificateCertificatePolicySecretProperties>;
        /**
         * A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
         */
        x509CertificateProperties?: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyX509CertificateProperties>;
    }
    interface CertificateCertificatePolicyIssuerParameters {
        /**
         * The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
         */
        name: pulumi.Input<string>;
    }
    interface CertificateCertificatePolicyKeyProperties {
        /**
         * Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
         */
        curve?: pulumi.Input<string>;
        /**
         * Is this certificate exportable?
         */
        exportable: pulumi.Input<boolean>;
        /**
         * The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
         */
        keySize?: pulumi.Input<number>;
        /**
         * Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
         */
        keyType: pulumi.Input<string>;
        /**
         * Is the key reusable?
         */
        reuseKey: pulumi.Input<boolean>;
    }
    interface CertificateCertificatePolicyLifetimeAction {
        /**
         * A `action` block as defined below.
         */
        action: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyLifetimeActionAction>;
        /**
         * A `trigger` block as defined below.
         */
        trigger: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyLifetimeActionTrigger>;
    }
    interface CertificateCertificatePolicyLifetimeActionAction {
        /**
         * The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
         */
        actionType: pulumi.Input<string>;
    }
    interface CertificateCertificatePolicyLifetimeActionTrigger {
        /**
         * The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
         */
        daysBeforeExpiry?: pulumi.Input<number>;
        /**
         * The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
         */
        lifetimePercentage?: pulumi.Input<number>;
    }
    interface CertificateCertificatePolicySecretProperties {
        /**
         * The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
         */
        contentType: pulumi.Input<string>;
    }
    interface CertificateCertificatePolicyX509CertificateProperties {
        /**
         * A list of Extended/Enhanced Key Usages.
         */
        extendedKeyUsages?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
         */
        keyUsages: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Certificate's Subject.
         */
        subject: pulumi.Input<string>;
        /**
         * A `subjectAlternativeNames` block as defined below.
         */
        subjectAlternativeNames?: pulumi.Input<inputs.keyvault.CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames>;
        /**
         * The Certificates Validity Period in Months.
         */
        validityInMonths: pulumi.Input<number>;
    }
    interface CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames {
        /**
         * A list of alternative DNS names (FQDNs) identified by the Certificate.
         */
        dnsNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of email addresses identified by this Certificate.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of User Principal Names identified by the Certificate.
         */
        upns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface CertificateContactsContact {
        /**
         * E-mail address of the contact.
         */
        email: pulumi.Input<string>;
        /**
         * Name of the contact.
         */
        name?: pulumi.Input<string>;
        /**
         * Phone number of the contact.
         */
        phone?: pulumi.Input<string>;
    }
    interface CertificateIssuerAdmin {
        /**
         * E-mail address of the admin.
         */
        emailAddress: pulumi.Input<string>;
        /**
         * First name of the admin.
         */
        firstName?: pulumi.Input<string>;
        /**
         * Last name of the admin.
         */
        lastName?: pulumi.Input<string>;
        /**
         * Phone number of the admin.
         */
        phone?: pulumi.Input<string>;
    }
    interface KeyRotationPolicy {
        /**
         * An `automatic` block as defined below.
         */
        automatic?: pulumi.Input<inputs.keyvault.KeyRotationPolicyAutomatic>;
        /**
         * Expire a Key Vault Key after given duration as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
         */
        expireAfter?: pulumi.Input<string>;
        /**
         * Notify at a given duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
         */
        notifyBeforeExpiry?: pulumi.Input<string>;
    }
    interface KeyRotationPolicyAutomatic {
        /**
         * Rotate automatically at a duration after create as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
         */
        timeAfterCreation?: pulumi.Input<string>;
        /**
         * Rotate automatically at a duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
         */
        timeBeforeExpiry?: pulumi.Input<string>;
    }
    interface KeyVaultAccessPolicy {
        /**
         * The object ID of an Application in Azure Active Directory.
         */
        applicationId?: pulumi.Input<string>;
        /**
         * List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
         */
        certificatePermissions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of key permissions. Possible values are `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
         */
        keyPermissions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
         */
        objectId: pulumi.Input<string>;
        /**
         * List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
         */
        secretPermissions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
         */
        storagePermissions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.
         */
        tenantId: pulumi.Input<string>;
    }
    interface KeyVaultContact {
        email: pulumi.Input<string>;
        /**
         * Specifies the name of the Key Vault. Changing this forces a new resource to be created. The name must be globally unique. If the vault is in a recoverable state then the vault will need to be purged before reusing the name.
         */
        name?: pulumi.Input<string>;
        phone?: pulumi.Input<string>;
    }
    interface KeyVaultNetworkAcls {
        /**
         * Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
         */
        bypass: pulumi.Input<string>;
        /**
         * The Default Action to use when no rules match from `ipRules` / `virtualNetworkSubnetIds`. Possible values are `Allow` and `Deny`.
         */
        defaultAction: pulumi.Input<string>;
        /**
         * One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Subnet IDs which should be able to access this Key Vault.
         */
        virtualNetworkSubnetIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ManagedHardwareSecurityModuleNetworkAcls {
        /**
         * Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
         */
        bypass: pulumi.Input<string>;
        /**
         * The Default Action to use. Possible values are `Allow` and `Deny`.
         */
        defaultAction: pulumi.Input<string>;
    }
    interface ManagedHardwareSecurityModuleRoleDefinitionPermission {
        /**
         * One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        actions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of data action permission to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
         */
        dataActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        notActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of data action permission not to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
         */
        notDataActions?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace kusto {
    interface AttachedDatabaseConfigurationSharing {
        /**
         * List of external tables exclude from the follower database.
         */
        externalTablesToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of external tables to include in the follower database.
         */
        externalTablesToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of functions to exclude from the follower database.
         */
        functionsToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of functions to include in the follower database.
         */
        functionsToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of materialized views exclude from the follower database.
         */
        materializedViewsToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of materialized views to include in the follower database.
         */
        materializedViewsToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of tables to exclude from the follower database.
         */
        tablesToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of tables to include in the follower database.
         */
        tablesToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ClusterIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Kusto Cluster.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this System Assigned Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this System Assigned Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that is configured on this Kusto Cluster. Possible values are: `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ClusterLanguageExtension {
        /**
         * The language extension image. Possible values are `Python3_11_7`, `Python3_11_7_DL`, `Python3_10_8`, `Python3_10_8_DL`, `Python3_6_5`, `PythonCustomImage`, and `R`.
         */
        image: pulumi.Input<string>;
        /**
         * The name of the Kusto Cluster to create. Only lowercase Alphanumeric characters allowed, starting with a letter. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
    interface ClusterOptimizedAutoScale {
        /**
         * The maximum number of allowed instances. Possible values range between `0` and `1000`.
         */
        maximumInstances: pulumi.Input<number>;
        /**
         * The minimum number of allowed instances. Possible values range between `0` and `1000`.
         */
        minimumInstances: pulumi.Input<number>;
    }
    interface ClusterSku {
        /**
         * Specifies the node count for the cluster. Boundaries depend on the SKU name.
         *
         * > **Note:** If no `optimizedAutoScale` block is defined, then the capacity is required.
         *
         * > **Note:** If an `optimizedAutoScale` block is defined and no capacity is set, then the capacity is initially set to the value of `minimumInstances`.
         */
        capacity?: pulumi.Input<number>;
        /**
         * The name of the SKU. Possible values are `Dev(No SLA)_Standard_D11_v2`, `Dev(No SLA)_Standard_E2a_v4`, `Standard_D14_v2`, `Standard_D11_v2`, `Standard_D16d_v5`, `Standard_D13_v2`, `Standard_D12_v2`, `Standard_DS14_v2+4TB_PS`, `Standard_DS14_v2+3TB_PS`, `Standard_DS13_v2+1TB_PS`, `Standard_DS13_v2+2TB_PS`, `Standard_D32d_v5`, `Standard_D32d_v4`, `Standard_EC8ads_v5`, `Standard_EC8as_v5+1TB_PS`, `Standard_EC8as_v5+2TB_PS`, `Standard_EC16ads_v5`, `Standard_EC16as_v5+4TB_PS`, `Standard_EC16as_v5+3TB_PS`, `Standard_E80ids_v4`, `Standard_E8a_v4`, `Standard_E8ads_v5`, `Standard_E8as_v5+1TB_PS`, `Standard_E8as_v5+2TB_PS`, `Standard_E8as_v4+1TB_PS`, `Standard_E8as_v4+2TB_PS`, `Standard_E8d_v5`, `Standard_E8d_v4`, `Standard_E8s_v5+1TB_PS`, `Standard_E8s_v5+2TB_PS`, `Standard_E8s_v4+1TB_PS`, `Standard_E8s_v4+2TB_PS`, `Standard_E4a_v4`, `Standard_E4ads_v5`, `Standard_E4d_v5`, `Standard_E4d_v4`, `Standard_E16a_v4`, `Standard_E16ads_v5`, `Standard_E16as_v5+4TB_PS`, `Standard_E16as_v5+3TB_PS`, `Standard_E16as_v4+4TB_PS`, `Standard_E16as_v4+3TB_PS`, `Standard_E16d_v5`, `Standard_E16d_v4`, `Standard_E16s_v5+4TB_PS`, `Standard_E16s_v5+3TB_PS`, `Standard_E16s_v4+4TB_PS`, `Standard_E16s_v4+3TB_PS`, `Standard_E64i_v3`, `Standard_E2a_v4`, `Standard_E2ads_v5`, `Standard_E2d_v5`, `Standard_E2d_v4`, `Standard_L8as_v3`, `Standard_L8s`, `Standard_L8s_v3`, `Standard_L8s_v2`, `Standard_L4s`, `Standard_L16as_v3`, `Standard_L16s`, `Standard_L16s_v3`, `Standard_L16s_v2`, `Standard_L32as_v3` and `Standard_L32s_v3`.
         */
        name: pulumi.Input<string>;
    }
    interface ClusterVirtualNetworkConfiguration {
        dataManagementPublicIpId: pulumi.Input<string>;
        enginePublicIpId: pulumi.Input<string>;
        subnetId: pulumi.Input<string>;
    }
}
export declare namespace lb {
    interface BackendAddressPoolAddressInboundNatRulePortMapping {
        /**
         * The Backend Port of the Load Balancing Inbound NAT Rules associated with this Backend Address Pool Address.
         */
        backendPort?: pulumi.Input<number>;
        /**
         * The Frontend Port of the Load Balancing Inbound NAT Rules associated with this Backend Address Pool Address.
         */
        frontendPort?: pulumi.Input<number>;
        /**
         * The name of the Load Balancing Inbound NAT Rules associated with this Backend Address Pool Address.
         */
        inboundNatRuleName?: pulumi.Input<string>;
    }
    interface BackendAddressPoolTunnelInterface {
        /**
         * The unique identifier of this Gateway Load Balancer Tunnel Interface.
         */
        identifier: pulumi.Input<number>;
        /**
         * The port number that this Gateway Load Balancer Tunnel Interface listens to.
         */
        port: pulumi.Input<number>;
        /**
         * The protocol used for this Gateway Load Balancer Tunnel Interface. Possible values are `None`, `Native` and `VXLAN`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The traffic type of this Gateway Load Balancer Tunnel Interface. Possible values are `None`, `Internal` and `External`.
         */
        type: pulumi.Input<string>;
    }
    interface LoadBalancerFrontendIpConfiguration {
        /**
         * The Frontend IP Configuration ID of a Gateway SKU Load Balancer.
         */
        gatewayLoadBalancerFrontendIpConfigurationId?: pulumi.Input<string>;
        /**
         * The id of the Frontend IP Configuration.
         */
        id?: pulumi.Input<string>;
        /**
         * The list of IDs of inbound rules that use this frontend IP.
         */
        inboundNatRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of IDs of load balancing rules that use this frontend IP.
         */
        loadBalancerRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the frontend IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The list of IDs outbound rules that use this frontend IP.
         */
        outboundRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Private IP Address to assign to the Load Balancer. The last one and first four IPs in any range are reserved and cannot be manually assigned.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The allocation method for the Private IP Address used by this Load Balancer. Possible values as `Dynamic` and `Static`.
         */
        privateIpAddressAllocation?: pulumi.Input<string>;
        /**
         * The version of IP that the Private IP Address is. Possible values are `IPv4` or `IPv6`.
         */
        privateIpAddressVersion?: pulumi.Input<string>;
        /**
         * The ID of a Public IP Address which should be associated with the Load Balancer.
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * The ID of a Public IP Prefix which should be associated with the Load Balancer. Public IP Prefix can only be used with outbound rules.
         */
        publicIpPrefixId?: pulumi.Input<string>;
        /**
         * The ID of the Subnet which should be associated with the IP Configuration.
         */
        subnetId?: pulumi.Input<string>;
        /**
         * Specifies a list of Availability Zones in which the IP Address for this Load Balancer should be located.
         *
         * > **Note:** Availability Zones are only supported with a [Standard SKU](https://docs.microsoft.com/azure/load-balancer/load-balancer-standard-availability-zones) and [in select regions](https://docs.microsoft.com/azure/availability-zones/az-overview) at this time.
         */
        zones?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface OutboundRuleFrontendIpConfiguration {
        /**
         * The ID of the Load Balancer Outbound Rule.
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Frontend IP Configuration.
         */
        name: pulumi.Input<string>;
    }
}
export declare namespace lighthouse {
    interface DefinitionAuthorization {
        /**
         * The set of role definition ids which define all the permissions that the principal id can assign.
         */
        delegatedRoleDefinitionIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The display name of the security group/service principal/user that would be assigned permissions to the projected subscription.
         */
        principalDisplayName?: pulumi.Input<string>;
        /**
         * Principal ID of the security group/service principal/user that would be assigned permissions to the projected subscription.
         */
        principalId: pulumi.Input<string>;
        /**
         * The role definition identifier. This role will define the permissions that are granted to the principal. This cannot be an `Owner` role.
         */
        roleDefinitionId: pulumi.Input<string>;
    }
    interface DefinitionEligibleAuthorization {
        /**
         * A `justInTimeAccessPolicy` block as defined below.
         */
        justInTimeAccessPolicy?: pulumi.Input<inputs.lighthouse.DefinitionEligibleAuthorizationJustInTimeAccessPolicy>;
        /**
         * The display name of the Azure Active Directory Principal.
         */
        principalDisplayName?: pulumi.Input<string>;
        /**
         * Principal ID of the security group/service principal/user that would be assigned permissions to the projected subscription.
         */
        principalId: pulumi.Input<string>;
        /**
         * The Principal ID of the Azure built-in role that defines the permissions that the Azure Active Directory will have on the projected scope.
         */
        roleDefinitionId: pulumi.Input<string>;
    }
    interface DefinitionEligibleAuthorizationJustInTimeAccessPolicy {
        /**
         * An `approver` block as defined below.
         */
        approvers?: pulumi.Input<pulumi.Input<inputs.lighthouse.DefinitionEligibleAuthorizationJustInTimeAccessPolicyApprover>[]>;
        /**
         * The maximum access duration in ISO 8601 format for just-in-time access requests. Defaults to `PT8H`.
         */
        maximumActivationDuration?: pulumi.Input<string>;
        /**
         * The multi-factor authorization provider to be used for just-in-time access requests. Possible value is `Azure`.
         *
         * > **Note:** When this property isn't set, it would be set to `None`.
         */
        multiFactorAuthProvider?: pulumi.Input<string>;
    }
    interface DefinitionEligibleAuthorizationJustInTimeAccessPolicyApprover {
        /**
         * The display name of the Azure Active Directory Principal for the approver.
         */
        principalDisplayName?: pulumi.Input<string>;
        /**
         * The Principal ID of the Azure Active Directory principal for the approver.
         */
        principalId: pulumi.Input<string>;
    }
    interface DefinitionPlan {
        /**
         * The plan name of the marketplace offer.
         */
        name: pulumi.Input<string>;
        /**
         * The product code of the plan.
         */
        product: pulumi.Input<string>;
        /**
         * The publisher ID of the plan.
         */
        publisher: pulumi.Input<string>;
        /**
         * The version of the plan.
         */
        version: pulumi.Input<string>;
    }
}
export declare namespace loadtest {
    interface LoadTestEncryption {
        /**
         * An `identity` block as defined below. Changing this forces a new Load Test to be created.
         */
        identity: pulumi.Input<inputs.loadtest.LoadTestEncryptionIdentity>;
        /**
         * The URI specifying the Key vault and key to be used to encrypt data in this resource. The URI should include the key version. Changing this forces a new Load Test to be created.
         */
        keyUrl: pulumi.Input<string>;
    }
    interface LoadTestEncryptionIdentity {
        /**
         * The User Assigned Identity ID that should be assigned to this Load Test Encryption. Changing this forces a new Load Test to be created.
         *
         * > **Note:** The User Assigned Identity ID specified here must also exist in `identity.identity_ids`.
         */
        identityId: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Identity that should be assigned to this Load Test Encryption. Possible values are `SystemAssigned` or `UserAssigned`. Changing this forces a new Load Test to be created.
         */
        type: pulumi.Input<string>;
    }
    interface LoadTestIdentity {
        /**
         * A list of the User Assigned Identity IDs that should be assigned to this Load Test.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the System-Assigned Managed Identity assigned to this Load Test.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the System-Assigned Managed Identity assigned to this Load Test.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Identity that should be assigned to this Load Test Encryption. Possible values are `SystemAssigned` or `UserAssigned`. Changing this forces a new Load Test to be created.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace loganalytics {
    interface ClusterIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Windows Web App Slot. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Log Analytics Cluster. Possible values are `SystemAssigned` and `UserAssigned`. Changing this forces a new resource to be created.
         *
         * > **Note:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and the Log Analytics Cluster has been created. More details are available below.
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceTableCustomLogColumn {
        /**
         * The description of the column.
         */
        description?: pulumi.Input<string>;
        /**
         * The display name of the column.
         */
        displayName?: pulumi.Input<string>;
        /**
         * Specifies the name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * The data type of the column. Possible values are `boolean`, `datetime`, `dynamic`, `guid`, `int`, `long`, `real`, and `string`.
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceTableCustomLogStandardColumn {
        /**
         * The description of the table.
         */
        description?: pulumi.Input<string>;
        /**
         * The display name of the table.
         */
        displayName?: pulumi.Input<string>;
        /**
         * Specifies the name of the Log Analytics Workspace Table Custom Log. Changing this forces a new resource to be created.
         *
         * > **Note:** `name` must end with `_CL`.
         */
        name?: pulumi.Input<string>;
        /**
         * The data type of the standard column.
         */
        type?: pulumi.Input<string>;
    }
}
export declare namespace logicapps {
    interface ActionHttpRunAfter {
        /**
         * Specifies the name of the precedent HTTP Action.
         */
        actionName: pulumi.Input<string>;
        /**
         * Specifies the expected result of the precedent HTTP Action, only after which the current HTTP Action will be triggered. Possible values include `Succeeded`, `Failed`, `Skipped` and `TimedOut`.
         */
        actionResult: pulumi.Input<string>;
    }
    interface IntegrationAccountAgreementGuestIdentity {
        /**
         * The authenticating body that provides unique guest identities to organizations.
         */
        qualifier: pulumi.Input<string>;
        /**
         * The value that identifies the documents that your logic apps receive.
         */
        value: pulumi.Input<string>;
    }
    interface IntegrationAccountAgreementHostIdentity {
        /**
         * The authenticating body that provides unique host identities to organizations.
         */
        qualifier: pulumi.Input<string>;
        /**
         * The value that identifies the documents that your logic apps receive.
         */
        value: pulumi.Input<string>;
    }
    interface IntegrationAccountBatchConfigurationReleaseCriteria {
        /**
         * The batch size in bytes for the Logic App Integration Batch Configuration.
         */
        batchSize?: pulumi.Input<number>;
        /**
         * The message count for the Logic App Integration Batch Configuration.
         */
        messageCount?: pulumi.Input<number>;
        /**
         * A `recurrence` block as documented below.
         */
        recurrence?: pulumi.Input<inputs.logicapps.IntegrationAccountBatchConfigurationReleaseCriteriaRecurrence>;
    }
    interface IntegrationAccountBatchConfigurationReleaseCriteriaRecurrence {
        /**
         * The end time of the schedule, formatted as an RFC3339 string.
         */
        endTime?: pulumi.Input<string>;
        /**
         * The frequency of the schedule. Possible values are `Day`, `Hour`, `Minute`, `Month`, `NotSpecified`, `Second`, `Week` and `Year`.
         */
        frequency: pulumi.Input<string>;
        /**
         * The number of `frequency`s between runs.
         */
        interval: pulumi.Input<number>;
        /**
         * A `schedule` block as documented below.
         */
        schedule?: pulumi.Input<inputs.logicapps.IntegrationAccountBatchConfigurationReleaseCriteriaRecurrenceSchedule>;
        /**
         * The start time of the schedule, formatted as an RFC3339 string.
         */
        startTime?: pulumi.Input<string>;
        /**
         * The timezone of the start/end time.
         */
        timeZone?: pulumi.Input<string>;
    }
    interface IntegrationAccountBatchConfigurationReleaseCriteriaRecurrenceSchedule {
        /**
         * A list containing a single item, which specifies the Hour interval at which this recurrence should be triggered.
         */
        hours?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * A list containing a single item which specifies the Minute interval at which this recurrence should be triggered.
         */
        minutes?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * A list of days of the month that the job should execute on.
         */
        monthDays?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * A `monthly` block as documented below.
         */
        monthlies?: pulumi.Input<pulumi.Input<inputs.logicapps.IntegrationAccountBatchConfigurationReleaseCriteriaRecurrenceScheduleMonthly>[]>;
        /**
         * A list of days of the week that the job should execute on. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` and `Saturday`.
         */
        weekDays?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface IntegrationAccountBatchConfigurationReleaseCriteriaRecurrenceScheduleMonthly {
        /**
         * The occurrence of the week within the month.
         */
        week: pulumi.Input<number>;
        /**
         * The day of the occurrence. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` and `Saturday`.
         */
        weekday: pulumi.Input<string>;
    }
    interface IntegrationAccountCertificateKeyVaultKey {
        /**
         * The name of Key Vault Key.
         */
        keyName: pulumi.Input<string>;
        /**
         * The ID of the Key Vault.
         */
        keyVaultId: pulumi.Input<string>;
        /**
         * The version of Key Vault Key.
         */
        keyVersion?: pulumi.Input<string>;
    }
    interface IntegrationAccountPartnerBusinessIdentity {
        /**
         * The authenticating body that provides unique business identities to organizations.
         */
        qualifier: pulumi.Input<string>;
        /**
         * The value that identifies the documents that your logic apps receive.
         */
        value: pulumi.Input<string>;
    }
    interface StandardConnectionString {
        /**
         * The name of the Connection String.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the Connection String. Possible values are `APIHub`, `Custom`, `DocDb`, `EventHub`, `MySQL`, `NotificationHub`, `PostgreSQL`, `RedisCache`, `ServiceBus`, `SQLAzure` and `SQLServer`.
         */
        type: pulumi.Input<string>;
        /**
         * The value for the Connection String.
         */
        value: pulumi.Input<string>;
    }
    interface StandardIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Logic App Standard.
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Logic App has been created. More details are available below.
         *
         * > **Note:** The `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Logic App Standard. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface StandardSiteConfig {
        /**
         * Should the Logic App be loaded at all times? Defaults to `false`.
         */
        alwaysOn?: pulumi.Input<boolean>;
        /**
         * The number of workers this Logic App can scale out to. Only applicable to apps on the Consumption and Premium plan.
         */
        appScaleLimit?: pulumi.Input<number>;
        /**
         * The Auto-swap slot name.
         */
        autoSwapSlotName?: pulumi.Input<string>;
        /**
         * A `cors` block as defined below.
         */
        cors?: pulumi.Input<inputs.logicapps.StandardSiteConfigCors>;
        /**
         * The version of the .NET framework's CLR used in this Logic App Possible values are `v4.0` (including .NET Core 2.1 and 3.1), `v5.0`, `v6.0` and `v8.0`. [For more information on which .NET Framework version to use based on the runtime version you're targeting - please see this table](https://docs.microsoft.com/azure/azure-functions/functions-dotnet-class-library#supported-versions). Defaults to `v4.0`.
         */
        dotnetFrameworkVersion?: pulumi.Input<string>;
        /**
         * The number of minimum instances for this Logic App Only affects apps on the Premium plan.
         */
        elasticInstanceMinimum?: pulumi.Input<number>;
        /**
         * State of FTP / FTPS service for this Logic App. Possible values include: `AllAllowed`, `FtpsOnly` and `Disabled`. Defaults to `AllAllowed`.
         */
        ftpsState?: pulumi.Input<string>;
        /**
         * Path which will be checked for this Logic App health.
         */
        healthCheckPath?: pulumi.Input<string>;
        /**
         * Specifies whether the HTTP2 protocol should be enabled. Defaults to `false`.
         */
        http2Enabled?: pulumi.Input<boolean>;
        /**
         * The action to take when no `ipRestriction` rules match. Possible values are `Allow` and `Deny`.
         *
         * > **Note:** If `ipRestrictionDefaultAction` is not configured, it is implicitly set to `Allow` when no `ipRestriction` rules are defined and `Deny` when at least one `ipRestriction` rule is defined.
         */
        ipRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * A list of `ipRestriction` objects representing IP restrictions as defined below.
         *
         * > **Note:** User has to explicitly set `ipRestriction` to empty slice (`[]`) to remove it.
         */
        ipRestrictions?: pulumi.Input<pulumi.Input<inputs.logicapps.StandardSiteConfigIpRestriction>[]>;
        /**
         * Linux App Framework and version for the App Service, e.g. `DOCKER|(golang:latest)`. Setting this value will also set the `kind` of application deployed to `functionapp,linux,container,workflowapp`.
         *
         * > **Note:** You must set `osType` in `azure.appservice.ServicePlan` to `Linux` when this property is set.
         */
        linuxFxVersion?: pulumi.Input<string>;
        /**
         * The minimum supported TLS version for the Logic App. Possible values are `1.0`, `1.1`, `1.2` and `1.3`. Defaults to `1.2` for new Logic Apps.
         *
         * > **Note:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
         */
        minTlsVersion?: pulumi.Input<string>;
        /**
         * The number of pre-warmed instances for this Logic App Only affects apps on the Premium plan.
         */
        preWarmedInstanceCount?: pulumi.Input<number>;
        /**
         * @deprecated the `site_config.public_network_access_enabled` property has been superseded by the `publicNetworkAccess` property and will be removed in v5.0 of the AzureRM Provider.
         */
        publicNetworkAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Should Runtime Scale Monitoring be enabled?. Only applicable to apps on the Premium plan. Defaults to `false`.
         */
        runtimeScaleMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * The action to take when no `scmIpRestriction` rules match. Possible values are `Allow` and `Deny`.
         */
        scmIpRestrictionDefaultAction?: pulumi.Input<string>;
        /**
         * A list of `scmIpRestriction` objects representing SCM IP restrictions as defined below.
         *
         * > **Note:** User has to explicitly set `scmIpRestriction` to empty slice (`[]`) to remove it.
         */
        scmIpRestrictions?: pulumi.Input<pulumi.Input<inputs.logicapps.StandardSiteConfigScmIpRestriction>[]>;
        /**
         * Configures the minimum version of TLS required for SSL requests to the SCM site. Possible values are `1.0`, `1.1`, `1.2` and `1.3`.
         *
         * > **Note:** Azure Services will require TLS 1.2+ by August 2025, please see this [announcement](https://azure.microsoft.com/en-us/updates/v2/update-retirement-tls1-0-tls1-1-versions-azure-services/) for more.
         */
        scmMinTlsVersion?: pulumi.Input<string>;
        /**
         * The type of Source Control used by the Logic App in use by the Windows Function App. Defaults to `None`. Possible values are: `BitbucketGit`, `BitbucketHg`, `CodePlexGit`, `CodePlexHg`, `Dropbox`, `ExternalGit`, `ExternalHg`, `GitHub`, `LocalGit`, `None`, `OneDrive`, `Tfs`, `VSO`, and `VSTSRM`
         */
        scmType?: pulumi.Input<string>;
        /**
         * Should the Logic App `ipRestriction` configuration be used for the SCM too. Defaults to `false`.
         */
        scmUseMainIpRestriction?: pulumi.Input<boolean>;
        /**
         * Should the Logic App run in 32 bit mode, rather than 64 bit mode? Defaults to `true`.
         *
         * > **Note:** when using an App Service Plan in the `Free` or `Shared` Tiers `use32BitWorkerProcess` must be set to `true`.
         */
        use32BitWorkerProcess?: pulumi.Input<boolean>;
        /**
         * Should all outbound traffic to have Virtual Network Security Groups and User Defined Routes applied.
         */
        vnetRouteAllEnabled?: pulumi.Input<boolean>;
        /**
         * Should WebSockets be enabled?
         */
        websocketsEnabled?: pulumi.Input<boolean>;
    }
    interface StandardSiteConfigCors {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Are credentials supported?
         */
        supportCredentials?: pulumi.Input<boolean>;
    }
    interface StandardSiteConfigIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific as a `ipRestriction` block as defined below.
         */
        headers?: pulumi.Input<inputs.logicapps.StandardSiteConfigIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, the priority is set to 65000 if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface StandardSiteConfigIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface StandardSiteConfigScmIpRestriction {
        /**
         * Does this restriction `Allow` or `Deny` access for this IP range. Defaults to `Allow`.
         */
        action?: pulumi.Input<string>;
        /**
         * The Description of this IP Restriction.
         */
        description?: pulumi.Input<string>;
        /**
         * The `headers` block for this specific `ipRestriction` as defined below.
         */
        headers?: pulumi.Input<inputs.logicapps.StandardSiteConfigScmIpRestrictionHeaders>;
        /**
         * The IP Address used for this IP Restriction in CIDR notation.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name for this IP Restriction.
         */
        name?: pulumi.Input<string>;
        /**
         * The priority for this IP Restriction. Restrictions are enforced in priority order. By default, the priority is set to `65000` if not specified.
         */
        priority?: pulumi.Input<number>;
        /**
         * The Service Tag used for this IP Restriction.
         */
        serviceTag?: pulumi.Input<string>;
        /**
         * The Virtual Network Subnet ID used for this IP Restriction.
         *
         * > **Note:** One of either `ipAddress`, `serviceTag` or `virtualNetworkSubnetId` must be specified.
         */
        virtualNetworkSubnetId?: pulumi.Input<string>;
    }
    interface StandardSiteConfigScmIpRestrictionHeaders {
        /**
         * A list of allowed Azure FrontDoor IDs in UUID notation with a maximum of 8.
         */
        xAzureFdids?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list to allow the Azure FrontDoor health probe header. Only allowed value is `1`.
         */
        xFdHealthProbe?: pulumi.Input<string>;
        /**
         * A list of allowed 'X-Forwarded-For' IPs in CIDR notation with a maximum of 8.
         */
        xForwardedFors?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of allowed 'X-Forwarded-Host' domains with a maximum of 8.
         */
        xForwardedHosts?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface StandardSiteCredential {
        /**
         * The password associated with the username, which can be used to publish to this App Service.
         */
        password?: pulumi.Input<string>;
        /**
         * The username which can be used to publish to this App Service.
         */
        username?: pulumi.Input<string>;
    }
    interface TriggerRecurrenceSchedule {
        /**
         * Specifies a list of hours when the trigger should run. Valid values are between 0 and 23.
         */
        atTheseHours?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Specifies a list of minutes when the trigger should run. Valid values are between 0 and 59.
         */
        atTheseMinutes?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Specifies a list of days when the trigger should run. Valid values include `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, and `Sunday`.
         */
        onTheseDays?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WorkflowAccessControl {
        /**
         * A `action` block as defined below.
         */
        action?: pulumi.Input<inputs.logicapps.WorkflowAccessControlAction>;
        /**
         * A `content` block as defined below.
         */
        content?: pulumi.Input<inputs.logicapps.WorkflowAccessControlContent>;
        /**
         * A `trigger` block as defined below.
         */
        trigger?: pulumi.Input<inputs.logicapps.WorkflowAccessControlTrigger>;
        /**
         * A `workflowManagement` block as defined below.
         */
        workflowManagement?: pulumi.Input<inputs.logicapps.WorkflowAccessControlWorkflowManagement>;
    }
    interface WorkflowAccessControlAction {
        /**
         * A list of the allowed caller IP address ranges.
         */
        allowedCallerIpAddressRanges: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WorkflowAccessControlContent {
        /**
         * A list of the allowed caller IP address ranges.
         */
        allowedCallerIpAddressRanges: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WorkflowAccessControlTrigger {
        /**
         * A list of the allowed caller IP address ranges.
         */
        allowedCallerIpAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `openAuthenticationPolicy` block as defined below.
         */
        openAuthenticationPolicies?: pulumi.Input<pulumi.Input<inputs.logicapps.WorkflowAccessControlTriggerOpenAuthenticationPolicy>[]>;
    }
    interface WorkflowAccessControlTriggerOpenAuthenticationPolicy {
        /**
         * A `claim` block as defined below.
         */
        claims: pulumi.Input<pulumi.Input<inputs.logicapps.WorkflowAccessControlTriggerOpenAuthenticationPolicyClaim>[]>;
        /**
         * The OAuth policy name for the Logic App Workflow.
         */
        name: pulumi.Input<string>;
    }
    interface WorkflowAccessControlTriggerOpenAuthenticationPolicyClaim {
        /**
         * The name of the OAuth policy claim for the Logic App Workflow.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the OAuth policy claim for the Logic App Workflow.
         */
        value: pulumi.Input<string>;
    }
    interface WorkflowAccessControlWorkflowManagement {
        /**
         * A list of the allowed caller IP address ranges.
         */
        allowedCallerIpAddressRanges: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface WorkflowIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Logic App Workflow.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Logic App Workflow.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Logic App Workflow.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Logic App Workflow. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace machinelearning {
    interface ComputeClusterIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Machine Learning Compute Cluster.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Compute Cluster.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Compute Cluster.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Machine Learning Compute Cluster. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface ComputeClusterScaleSettings {
        /**
         * Maximum node count.
         */
        maxNodeCount: pulumi.Input<number>;
        /**
         * Minimal node count.
         */
        minNodeCount: pulumi.Input<number>;
        /**
         * Node Idle Time Before Scale Down: defines the time until the compute is shutdown when it has gone into Idle state. Is defined according to W3C XML schema standard for duration.
         */
        scaleDownNodesAfterIdleDuration: pulumi.Input<string>;
    }
    interface ComputeClusterSsh {
        /**
         * Password of the administrator user account. Changing this forces a new Machine Learning Compute Cluster to be created.
         */
        adminPassword?: pulumi.Input<string>;
        /**
         * Name of the administrator user account which can be used to SSH to nodes. Changing this forces a new Machine Learning Compute Cluster to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * SSH public key of the administrator user account. Changing this forces a new Machine Learning Compute Cluster to be created.
         *
         * > **Note:** At least one of `adminPassword` and `keyValue` shoud be specified.
         */
        keyValue?: pulumi.Input<string>;
    }
    interface ComputeInstanceAssignToUser {
        /**
         * User’s AAD Object Id.
         */
        objectId?: pulumi.Input<string>;
        /**
         * User’s AAD Tenant Id.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ComputeInstanceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Machine Learning Compute Instance. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Compute Instance.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Compute Instance.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Machine Learning Compute Instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both). Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface ComputeInstanceSsh {
        /**
         * Describes the port for connecting through SSH.
         */
        port?: pulumi.Input<number>;
        /**
         * Specifies the SSH rsa public key file as a string. Use "ssh-keygen -t rsa -b 2048" to generate your SSH key pairs.
         */
        publicKey: pulumi.Input<string>;
        /**
         * The admin username of this Machine Learning Compute Instance.
         */
        username?: pulumi.Input<string>;
    }
    interface InferenceClusterIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Machine Learning Inference Cluster. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Inference Cluster.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Inference Cluster.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Machine Learning Inference Cluster. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both). Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface InferenceClusterSsl {
        /**
         * The certificate for the SSL configuration.Conflicts with `ssl[0].leaf_domain_label`,`ssl[0].overwrite_existing_domain`. Changing this forces a new Machine Learning Inference Cluster to be created. Defaults to `""`.
         */
        cert?: pulumi.Input<string>;
        /**
         * The cname of the SSL configuration.Conflicts with `ssl[0].leaf_domain_label`,`ssl[0].overwrite_existing_domain`. Changing this forces a new Machine Learning Inference Cluster to be created. Defaults to `""`.
         */
        cname?: pulumi.Input<string>;
        /**
         * The key content for the SSL configuration.Conflicts with `ssl[0].leaf_domain_label`,`ssl[0].overwrite_existing_domain`. Changing this forces a new Machine Learning Inference Cluster to be created. Defaults to `""`.
         */
        key?: pulumi.Input<string>;
        /**
         * The leaf domain label for the SSL configuration. Conflicts with `ssl[0].cert`,`ssl[0].key`,`ssl[0].cname`. Changing this forces a new Machine Learning Inference Cluster to be created. Defaults to `""`.
         */
        leafDomainLabel?: pulumi.Input<string>;
        /**
         * Whether or not to overwrite existing leaf domain. Conflicts with `ssl[0].cert`,`ssl[0].key`,`ssl[0].cname` Changing this forces a new Machine Learning Inference Cluster to be created.
         */
        overwriteExistingDomain?: pulumi.Input<boolean>;
    }
    interface SynapseSparkIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Machine Learning Synapse Spark. Changing this forces a new resource to be created.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Synapse Spark.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Machine Learning Synapse Spark.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Machine Learning Synapse Spark. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both). Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceEncryption {
        /**
         * The Key Vault URI to access the encryption key.
         */
        keyId: pulumi.Input<string>;
        /**
         * The ID of the keyVault where the customer owned encryption key is present.
         */
        keyVaultId: pulumi.Input<string>;
        /**
         * The Key Vault URI to access the encryption key.
         *
         * > **Note:** `userAssignedIdentityId` must set when`identity.type` is `UserAssigned` or service won't be able to find the assigned permissions.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface WorkspaceFeatureStore {
        /**
         * The version of Spark runtime.
         */
        computerSparkRuntimeVersion?: pulumi.Input<string>;
        /**
         * The name of offline store connection.
         */
        offlineConnectionName?: pulumi.Input<string>;
        /**
         * The name of online store connection.
         *
         * > **Note:** `featureStore` must be set when`kind` is `FeatureStore`
         */
        onlineConnectionName?: pulumi.Input<string>;
    }
    interface WorkspaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Machine Learning Workspace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Machine Learning Workspace. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceManagedNetwork {
        /**
         * The isolation mode of the Machine Learning Workspace. Possible values are `Disabled`, `AllowOnlyApprovedOutbound`, and `AllowInternetOutbound`.
         */
        isolationMode?: pulumi.Input<string>;
        /**
         * Set to trigger the provisioning of the managed VNet with the default options when creating a Machine Learning Workspace with the managed VNet enabled. Defaults to `false`. Changing this forces a new resource to be created.
         */
        provisionOnCreationEnabled?: pulumi.Input<boolean>;
    }
    interface WorkspaceServerlessCompute {
        /**
         * Should serverless compute nodes deployed in a custom Virtual Network have public IP addresses enabled for a workspace with private endpoint? Defaults to `false`.
         *
         * > **Note:** `publicIpEnabled` cannot be updated from `true` to `false` when `subnetId` is not set. `publicIpEnabled` must be set to `true` if `subnetId` is not set and when `publicNetworkAccessEnabled` is `false`.
         */
        publicIpEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of an existing Virtual Network Subnet in which the serverless compute nodes should be deployed to.
         */
        subnetId?: pulumi.Input<string>;
    }
}
export declare namespace maintenance {
    interface AssignmentDynamicScopeFilter {
        /**
         * Specifies a list of locations to scope the query to.
         */
        locations?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of allowed operating systems. Possible values are `Linux` and `Windows`.
         */
        osTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of allowed resource groups.
         */
        resourceGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of allowed resources. Possible values are `Microsoft.Compute/virtualMachines` and `Microsoft.HybridCompute/machines`.
         */
        resourceTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Filter VMs by `Any` or `All` specified tags. Defaults to `Any`.
         */
        tagFilter?: pulumi.Input<string>;
        /**
         * One or more `tags` blocks as defined below.
         */
        tags?: pulumi.Input<pulumi.Input<inputs.maintenance.AssignmentDynamicScopeFilterTag>[]>;
    }
    interface AssignmentDynamicScopeFilterTag {
        /**
         * Specifies the tag to filter by.
         */
        tag: pulumi.Input<string>;
        /**
         * Specifies a list of values the defined tag can have.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationInstallPatches {
        /**
         * A `linux` block as defined above. This property only applies when `scope` is set to `InGuestPatch`
         */
        linuxes?: pulumi.Input<pulumi.Input<inputs.maintenance.ConfigurationInstallPatchesLinux>[]>;
        /**
         * Possible reboot preference as defined by the user based on which it would be decided to reboot the machine or not after the patch operation is completed. Possible values are `Always`, `IfRequired` and `Never`. This property only applies when `scope` is set to `InGuestPatch`.
         */
        reboot?: pulumi.Input<string>;
        /**
         * A `windows` block as defined above. This property only applies when `scope` is set to `InGuestPatch`
         */
        windows?: pulumi.Input<pulumi.Input<inputs.maintenance.ConfigurationInstallPatchesWindow>[]>;
    }
    interface ConfigurationInstallPatchesLinux {
        /**
         * List of Classification category of patches to be patched. Possible values are `Critical`, `Security` and `Other`.
         */
        classificationsToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of package names to be excluded from patching.
         */
        packageNamesMaskToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of package names to be included for patching.
         */
        packageNamesMaskToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationInstallPatchesWindow {
        /**
         * List of Classification category of patches to be patched. Possible values are `Critical`, `Security`, `UpdateRollup`, `FeaturePack`, `ServicePack`, `Definition`, `Tools` and `Updates`.
         */
        classificationsToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of KB numbers to be excluded from patching.
         */
        kbNumbersToExcludes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of KB numbers to be included for patching.
         */
        kbNumbersToIncludes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ConfigurationWindow {
        /**
         * The duration of the maintenance window in HH:mm format.
         */
        duration?: pulumi.Input<string>;
        /**
         * Effective expiration date of the maintenance window in YYYY-MM-DD hh:mm format.
         */
        expirationDateTime?: pulumi.Input<string>;
        /**
         * The rate at which a maintenance window is expected to recur. The rate can be expressed as daily, weekly, or monthly schedules.
         */
        recurEvery?: pulumi.Input<string>;
        /**
         * Effective start date of the maintenance window in YYYY-MM-DD hh:mm format.
         */
        startDateTime: pulumi.Input<string>;
        /**
         * The time zone for the maintenance window. A list of timezones can be obtained by executing [System.TimeZoneInfo]::GetSystemTimeZones() in PowerShell.
         */
        timeZone: pulumi.Input<string>;
    }
}
export declare namespace managedapplication {
    interface ApplicationPlan {
        /**
         * Specifies the name of the plan from the marketplace. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the product of the plan from the marketplace. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * Specifies the promotion code to use with the plan. Changing this forces a new resource to be created.
         *
         * > **Note:** When `plan` is specified, legal terms must be accepted for this item on this subscription before creating the Managed Application. The `azure.marketplace.Agreement` resource or AZ CLI tool can be used to do this.
         */
        promotionCode?: pulumi.Input<string>;
        /**
         * Specifies the publisher of the plan. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * Specifies the version of the plan from the marketplace. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface DefinitionAuthorization {
        /**
         * Specifies a role definition identifier for the provider. This role will define all the permissions that the provider must have on the managed application's container resource group. This role definition cannot have permission to delete the resource group.
         */
        roleDefinitionId: pulumi.Input<string>;
        /**
         * Specifies a service principal identifier for the provider. This is the identity that the provider will use to call ARM to manage the managed application resources.
         */
        servicePrincipalId: pulumi.Input<string>;
    }
}
export declare namespace managedlustre {
    interface FileSystemEncryptionKey {
        /**
         * The URL to the Key Vault Key used as the Encryption Key. This can be found as `id` on the `azure.keyvault.Key` resource.
         */
        keyUrl: pulumi.Input<string>;
        /**
         * The ID of the source Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource.
         */
        sourceVaultId: pulumi.Input<string>;
    }
    interface FileSystemHsmSetting {
        /**
         * The resource ID of the storage container that is used for hydrating the namespace and archiving from the namespace. Changing this forces a new resource to be created.
         */
        containerId: pulumi.Input<string>;
        /**
         * The import prefix for the Azure Managed Lustre File System. Only blobs in the non-logging container that start with this path/prefix get hydrated into the cluster namespace. Changing this forces a new resource to be created.
         *
         * > **Note:** The roles `Contributor` and `Storage Blob Data Contributor` must be added to the Service Principal `HPC Cache Resource Provider` for the Storage Account. See official docs for more information.
         */
        importPrefix?: pulumi.Input<string>;
        /**
         * The resource ID of the storage container that is used for logging events and errors. Changing this forces a new resource to be created.
         */
        loggingContainerId: pulumi.Input<string>;
    }
    interface FileSystemIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Azure Managed Lustre File System. Changing this forces a new resource to be created.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this Azure Managed Lustre File System. Only possible value is `UserAssigned`. Changing this forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface FileSystemMaintenanceWindow {
        /**
         * The day of the week on which the maintenance window will occur. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday` and `Saturday`.
         */
        dayOfWeek: pulumi.Input<string>;
        /**
         * The time of day (in UTC) to start the maintenance window.
         */
        timeOfDayInUtc: pulumi.Input<string>;
    }
    interface FileSystemRootSquash {
        /**
         * Squash mode of the AML file system. Possible values are `RootOnly`, and `All`.
         */
        mode: pulumi.Input<string>;
        /**
         * NID IP Address list(s) to be added to the TrustedSystems, separated by semicolons.
         */
        noSquashNids: pulumi.Input<string>;
        /**
         * The GID to be used for the root squash. Defaults to `0`.
         */
        squashGid?: pulumi.Input<number>;
        /**
         * The UID to be used for the root squash. Defaults to `0`.
         */
        squashUid?: pulumi.Input<number>;
    }
}
export declare namespace managedredis {
    interface ManagedRedisCustomerManagedKey {
        /**
         * The ID of the key vault key used for encryption. For example: `https://example-vault-name.vault.azure.net/keys/example-key-name/a1b2c3d4`.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity that has access to the Key Vault Key.
         */
        userAssignedIdentityId: pulumi.Input<string>;
    }
    interface ManagedRedisDefaultDatabase {
        /**
         * Whether access key authentication is enabled for the database. Defaults to `false`.
         */
        accessKeysAuthenticationEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies whether redis clients can connect using TLS-encrypted or plaintext redis protocols. Possible values are `Encrypted` and `Plaintext`. Defaults to `Encrypted`.
         */
        clientProtocol?: pulumi.Input<string>;
        /**
         * Clustering policy specified at create time. Possible values are `EnterpriseCluster`, `OSSCluster` and `NoCluster`. Defaults to `OSSCluster`.
         *
         * !> **Note:** Changing `clusteringPolicy` forces database recreation. Data will be lost and Managed Redis will be unavailable during the operation.
         */
        clusteringPolicy?: pulumi.Input<string>;
        /**
         * Specifies the Redis eviction policy. Possible values are `AllKeysLFU`, `AllKeysLRU`, `AllKeysRandom`, `VolatileLRU`, `VolatileLFU`, `VolatileTTL`, `VolatileRandom` and `NoEviction`. Defaults to `VolatileLRU`.
         */
        evictionPolicy?: pulumi.Input<string>;
        /**
         * The name of the geo-replication group. If provided, a geo-replication group will be created for this database with itself as the only member. Use `azure.managedredis.GeoReplication` resource to manage group membership, linking and unlinking. All databases to be linked have to have the same group name. Refer to the [Managed Redis geo-replication documentation](https://learn.microsoft.com/azure/redis/how-to-active-geo-replication) for more information.
         *
         * !> **Note:** Changing `geoReplicationGroupName` forces database recreation. Data will be lost and Managed Redis will be unavailable during the operation.
         */
        geoReplicationGroupName?: pulumi.Input<string>;
        /**
         * The ID of the Managed Redis Database Instance.
         */
        id?: pulumi.Input<string>;
        /**
         * A `module` block as defined below. Refer to [the modules documentation](https://learn.microsoft.com/azure/redis/redis-modules) to learn more.
         */
        modules?: pulumi.Input<pulumi.Input<inputs.managedredis.ManagedRedisDefaultDatabaseModule>[]>;
        /**
         * The frequency of Append Only File (AOF) backups. The only possible value is `1s`. Providing this value implies AOF persistence method is enabled. Conflicts with `persistenceRedisDatabaseBackupFrequency`, only one persistence method is allowed. Conflicts with `geoReplicationGroupName`, persistence can only be enabled on non-geo-replicated databases. Refer to [the persistence documentation](https://learn.microsoft.com/azure/redis/how-to-persistence) to learn more.
         */
        persistenceAppendOnlyFileBackupFrequency?: pulumi.Input<string>;
        /**
         * The frequency of Redis Database (RDB) backups. Possible values are `1h`, `6h` and `12h`. Providing this value implies RDB persistence method is enabled. Conflicts with `persistenceAppendOnlyFileBackupFrequency`, only one persistence method is allowed. Conflicts with `geoReplicationGroupName`, persistence can only be enabled on non-geo-replicated databases. Refer to [the persistence documentation](https://learn.microsoft.com/azure/redis/how-to-persistence) to learn more.
         */
        persistenceRedisDatabaseBackupFrequency?: pulumi.Input<string>;
        /**
         * TCP port of the database endpoint.
         */
        port?: pulumi.Input<number>;
        /**
         * The Primary Access Key for the Managed Redis Database Instance. Only exported if `accessKeysAuthenticationEnabled` is set to `true`.
         */
        primaryAccessKey?: pulumi.Input<string>;
        /**
         * The Secondary Access Key for the Managed Redis Database Instance. Only exported if `accessKeysAuthenticationEnabled` is set to `true`.
         */
        secondaryAccessKey?: pulumi.Input<string>;
    }
    interface ManagedRedisDefaultDatabaseModule {
        /**
         * Configuration options for the module (e.g. `ERROR_RATE 0.00 INITIAL_SIZE 400`).
         *
         * !> **Note:** Changing `args` forces database recreation. Data will be lost and Managed Redis will be unavailable during the operation.
         *
         * > **Note:** Only `RediSearch` and `RedisJSON` modules are allowed with geo-replication.
         */
        args?: pulumi.Input<string>;
        /**
         * The name which should be used for this module. Possible values are `RedisBloom`, `RedisTimeSeries`, `RediSearch` and `RedisJSON`.
         *
         * !> **Note:** Changing `name` forces database recreation. Data will be lost and Managed Redis will be unavailable during the operation.
         */
        name: pulumi.Input<string>;
        /**
         * Version of the module to be used.
         */
        version?: pulumi.Input<string>;
    }
    interface ManagedRedisIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Managed Redis instance.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Managed Redis instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace management {
    interface GroupPolicyAssignmentIdentity {
        /**
         * A list of User Managed Identity IDs which should be assigned to the Policy Definition.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID of the Policy Assignment for this Management Group.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the Policy Assignment for this Management Group.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * The Type of Managed Identity which should be added to this Policy Definition. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface GroupPolicyAssignmentNonComplianceMessage {
        /**
         * The non-compliance message text. When assigning policy sets (initiatives), unless `policyDefinitionReferenceId` is specified then this message will be the default for all policies.
         */
        content: pulumi.Input<string>;
        /**
         * When assigning policy sets (initiatives), this is the ID of the policy definition that the non-compliance message applies to.
         */
        policyDefinitionReferenceId?: pulumi.Input<string>;
    }
    interface GroupPolicyAssignmentOverride {
        /**
         * One or more `overrideSelector` block as defined below.
         */
        selectors?: pulumi.Input<pulumi.Input<inputs.management.GroupPolicyAssignmentOverrideSelector>[]>;
        /**
         * Specifies the value to override the policy property. Possible values for `policyEffect` override listed [policy effects](https://learn.microsoft.com/en-us/azure/governance/policy/concepts/effects).
         */
        value: pulumi.Input<string>;
    }
    interface GroupPolicyAssignmentOverrideSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind?: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface GroupPolicyAssignmentResourceSelector {
        /**
         * Specifies a name for the resource selector.
         */
        name?: pulumi.Input<string>;
        /**
         * One or more `resourceSelector` block as defined below.
         */
        selectors: pulumi.Input<pulumi.Input<inputs.management.GroupPolicyAssignmentResourceSelectorSelector>[]>;
    }
    interface GroupPolicyAssignmentResourceSelectorSelector {
        ins?: pulumi.Input<pulumi.Input<string>[]>;
        kind: pulumi.Input<string>;
        notIns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface GroupPolicySetDefinitionPolicyDefinitionGroup {
        /**
         * The ID of a resource that contains additional metadata for this Policy Definition Group.
         */
        additionalMetadataResourceId?: pulumi.Input<string>;
        /**
         * The category of this Policy Definition Group.
         */
        category?: pulumi.Input<string>;
        /**
         * The description of this Policy Definition Group.
         */
        description?: pulumi.Input<string>;
        /**
         * The display name of this Policy Definition Group.
         */
        displayName?: pulumi.Input<string>;
        /**
         * The name which should be used for this Policy Definition Group.
         */
        name: pulumi.Input<string>;
    }
    interface GroupPolicySetDefinitionPolicyDefinitionReference {
        /**
         * Parameter values for the references Policy Definition in JSON format.
         */
        parameterValues?: pulumi.Input<string>;
        /**
         * The ID of the Policy Definition to include in this Policy Set Definition.
         */
        policyDefinitionId: pulumi.Input<string>;
        /**
         * Specifies a list of Policy Definition Groups names that this Policy Definition Reference belongs to.
         */
        policyGroupNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A unique ID within this Policy Set Definition for this Policy Definition Reference.
         */
        referenceId?: pulumi.Input<string>;
        /**
         * The version of the Policy Definition to use.
         */
        version?: pulumi.Input<string>;
    }
}
export declare namespace maps {
    interface AccountCors {
        /**
         * A list of origins that should be allowed to make cross-origin calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AccountDataStore {
        /**
         * The ID of the Storage Account that should be linked to this Azure Maps Account.
         */
        storageAccountId?: pulumi.Input<string>;
        /**
         * The name given to the linked Storage Account.
         */
        uniqueName: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Azure Maps Account.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Azure Maps Account. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace mongocluster {
    interface MongoClusterConnectionString {
        /**
         * The description of the connection string.
         */
        description?: pulumi.Input<string>;
        /**
         * The name which should be used for the MongoDB Cluster. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The value of the Mongo Cluster connection string. The `<user>:<password>` placeholder returned from API will be replaced by the real `administratorUsername` and `administratorPassword` if available in the state.
         */
        value?: pulumi.Input<string>;
    }
    interface MongoClusterCustomerManagedKey {
        /**
         * The ID of the key vault key used for encryption. For example: `https://example-vault-name.vault.azure.net/keys/example-key-name`.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * The ID of the User Assigned Identity that has access to the Key Vault Key.
         */
        userAssignedIdentityId: pulumi.Input<string>;
    }
    interface MongoClusterIdentity {
        /**
         * A list of one or more Resource IDs for User Assigned Managed identities to assign.
         *
         * > **Note:** Required when `type` is set to `UserAssigned`.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of managed identity to assign. Possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface MongoClusterRestore {
        /**
         * The point in time (in UTC) to restore from, in ISO 8601 format (e.g., `2024-01-01T00:00:00Z`). Changing this forces a new resource to be created.
         */
        pointInTimeUtc: pulumi.Input<string>;
        /**
         * The ID of the source MongoDB Cluster to restore from. Changing this forces a new resource to be created.
         */
        sourceId: pulumi.Input<string>;
    }
    interface UserRole {
        /**
         * The name of the database to which the role will be applied. Changing this forces a new resource to be created.
         */
        database: pulumi.Input<string>;
        /**
         * The role name. The only possible value is `root`. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
    }
}
export declare namespace monitoring {
    interface AadDiagnosticSettingEnabledLog {
        /**
         * The log category for the Azure Active Directory Diagnostic.
         */
        category: pulumi.Input<string>;
        /**
         * @deprecated Azure does not support retention for new Azure Active Directory Diagnostic Settings
         */
        retentionPolicy?: pulumi.Input<inputs.monitoring.AadDiagnosticSettingEnabledLogRetentionPolicy>;
    }
    interface AadDiagnosticSettingEnabledLogRetentionPolicy {
        days?: pulumi.Input<number>;
        enabled?: pulumi.Input<boolean>;
    }
    interface ActionGroupArmRoleReceiver {
        /**
         * The name of the ARM role receiver.
         */
        name: pulumi.Input<string>;
        /**
         * The arm role id.
         */
        roleId: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupAutomationRunbookReceiver {
        /**
         * The automation account ID which holds this runbook and authenticates to Azure resources.
         */
        automationAccountId: pulumi.Input<string>;
        /**
         * Indicates whether this instance is global runbook.
         */
        isGlobalRunbook: pulumi.Input<boolean>;
        /**
         * The name of the automation runbook receiver.
         */
        name: pulumi.Input<string>;
        /**
         * The name for this runbook.
         */
        runbookName: pulumi.Input<string>;
        /**
         * The URI where webhooks should be sent.
         */
        serviceUri: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
        /**
         * The resource id for webhook linked to this runbook.
         */
        webhookResourceId: pulumi.Input<string>;
    }
    interface ActionGroupAzureAppPushReceiver {
        /**
         * The email address of the user signed into the mobile app who will receive push notifications from this receiver.
         */
        emailAddress: pulumi.Input<string>;
        /**
         * The name of the Azure app push receiver.
         */
        name: pulumi.Input<string>;
    }
    interface ActionGroupAzureFunctionReceiver {
        /**
         * The Azure resource ID of the function app.
         */
        functionAppResourceId: pulumi.Input<string>;
        /**
         * The function name in the function app.
         */
        functionName: pulumi.Input<string>;
        /**
         * The HTTP trigger url where HTTP request sent to.
         */
        httpTriggerUrl: pulumi.Input<string>;
        /**
         * The name of the Azure Function receiver.
         */
        name: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupEmailReceiver {
        /**
         * The email address of this receiver.
         */
        emailAddress: pulumi.Input<string>;
        /**
         * The name of the email receiver. Names must be unique (case-insensitive) across all receivers within an action group.
         */
        name: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupEventHubReceiver {
        /**
         * The name of the specific Event Hub queue.
         */
        eventHubName: pulumi.Input<string>;
        /**
         * The namespace name of the Event Hub.
         */
        eventHubNamespace: pulumi.Input<string>;
        /**
         * The name of the EventHub Receiver, must be unique within action group.
         */
        name: pulumi.Input<string>;
        /**
         * The ID for the subscription containing this Event Hub. Default to the subscription ID of the Action Group.
         */
        subscriptionId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the subscription containing this Event Hub.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Indicates whether to use common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupItsmReceiver {
        /**
         * The unique connection identifier of the ITSM connection.
         */
        connectionId: pulumi.Input<string>;
        /**
         * The name of the ITSM receiver.
         */
        name: pulumi.Input<string>;
        /**
         * The region of the workspace.
         *
         * > **Note:** `ticketConfiguration` should be JSON blob with `PayloadRevision` and `WorkItemType` keys (e.g., `ticket_configuration="{\"PayloadRevision\":0,\"WorkItemType\":\"Incident\"}"`), and `ticket_configuration="{}"` will return an error, see more at this [REST API issue](https://github.com/Azure/azure-rest-api-specs/issues/20488)
         */
        region: pulumi.Input<string>;
        /**
         * A JSON blob for the configurations of the ITSM action. CreateMultipleWorkItems option will be part of this blob as well.
         */
        ticketConfiguration: pulumi.Input<string>;
        /**
         * The Azure Log Analytics workspace ID where this connection is defined. Format is `<subscription id>|<workspace id>`, for example `00000000-0000-0000-0000-000000000000|00000000-0000-0000-0000-000000000000`.
         */
        workspaceId: pulumi.Input<string>;
    }
    interface ActionGroupLogicAppReceiver {
        /**
         * The callback url where HTTP request sent to.
         */
        callbackUrl: pulumi.Input<string>;
        /**
         * The name of the logic app receiver.
         */
        name: pulumi.Input<string>;
        /**
         * The Azure resource ID of the logic app.
         */
        resourceId: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupSmsReceiver {
        /**
         * The country code of the SMS receiver.
         */
        countryCode: pulumi.Input<string>;
        /**
         * The name of the SMS receiver. Names must be unique (case-insensitive) across all receivers within an action group.
         */
        name: pulumi.Input<string>;
        /**
         * The phone number of the SMS receiver.
         */
        phoneNumber: pulumi.Input<string>;
    }
    interface ActionGroupVoiceReceiver {
        /**
         * The country code of the voice receiver.
         */
        countryCode: pulumi.Input<string>;
        /**
         * The name of the voice receiver.
         */
        name: pulumi.Input<string>;
        /**
         * The phone number of the voice receiver.
         */
        phoneNumber: pulumi.Input<string>;
    }
    interface ActionGroupWebhookReceiver {
        /**
         * The `aadAuth` block as defined below.
         *
         * > **Note:** Before adding a secure webhook receiver by setting `aadAuth`, please read [the configuration instruction of the AAD application](https://docs.microsoft.com/azure/azure-monitor/platform/action-groups#secure-webhook).
         */
        aadAuth?: pulumi.Input<inputs.monitoring.ActionGroupWebhookReceiverAadAuth>;
        /**
         * The name of the webhook receiver. Names must be unique (case-insensitive) across all receivers within an action group.
         */
        name: pulumi.Input<string>;
        /**
         * The URI where webhooks should be sent.
         */
        serviceUri: pulumi.Input<string>;
        /**
         * Enables or disables the common alert schema.
         */
        useCommonAlertSchema?: pulumi.Input<boolean>;
    }
    interface ActionGroupWebhookReceiverAadAuth {
        /**
         * The identifier URI for AAD auth.
         */
        identifierUri?: pulumi.Input<string>;
        /**
         * The webhook application object Id for AAD auth.
         */
        objectId: pulumi.Input<string>;
        /**
         * The tenant id for AAD auth.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ActivityLogAlertAction {
        /**
         * The ID of the Action Group can be sourced from the `azure.monitoring.ActionGroup` resource.
         */
        actionGroupId: pulumi.Input<string>;
        /**
         * The map of custom string properties to include with the post operation. These data are appended to the webhook payload.
         */
        webhookProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface ActivityLogAlertCriteria {
        /**
         * The email address or Azure Active Directory identifier of the user who performed the operation.
         */
        caller?: pulumi.Input<string>;
        /**
         * The category of the operation. Possible values are `Administrative`, `Autoscale`, `Policy`, `Recommendation`, `ResourceHealth`, `Security` and `ServiceHealth`.
         */
        category: pulumi.Input<string>;
        /**
         * The severity level of the event. Possible values are `Verbose`, `Informational`, `Warning`, `Error`, and `Critical`.
         */
        level?: pulumi.Input<string>;
        /**
         * A list of severity level of the event. Possible values are `Verbose`, `Informational`, `Warning`, `Error`, and `Critical`.
         *
         * > **Note:** `level` and `levels` are mutually exclusive.
         */
        levels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Resource Manager Role-Based Access Control operation name. Supported operation should be of the form: `<resourceProvider>/<resourceType>/<operation>`.
         */
        operationName?: pulumi.Input<string>;
        /**
         * The recommendation category of the event. Possible values are `Cost`, `Reliability`, `OperationalExcellence`, `HighAvailability`, `Performance` and `Security`.
         */
        recommendationCategory?: pulumi.Input<string>;
        /**
         * The recommendation impact of the event. Possible values are `High`, `Medium` and `Low`.
         *
         * > **Note:** The `recommendationType`, `recommendationCategory`, and `recommendationImpact` fields can only be defined if the `category` field has been set to `Recommendation`.
         */
        recommendationImpact?: pulumi.Input<string>;
        /**
         * The recommendation type of the event.
         */
        recommendationType?: pulumi.Input<string>;
        /**
         * The name of resource group monitored by the activity log alert.
         */
        resourceGroup?: pulumi.Input<string>;
        /**
         * A list of names of resource groups monitored by the activity log alert.
         *
         * > **Note:** `resourceGroup` and `resourceGroups` are mutually exclusive.
         */
        resourceGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A block to define fine grain resource health settings.
         */
        resourceHealth?: pulumi.Input<inputs.monitoring.ActivityLogAlertCriteriaResourceHealth>;
        /**
         * The specific resource monitored by the activity log alert. It should be within one of the `scopes`.
         */
        resourceId?: pulumi.Input<string>;
        /**
         * A list of specific resources monitored by the activity log alert. It should be within one of the `scopes`.
         *
         * > **Note:** `resourceId` and `resourceIds` are mutually exclusive.
         */
        resourceIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the resource provider monitored by the activity log alert.
         */
        resourceProvider?: pulumi.Input<string>;
        /**
         * A list of names of resource providers monitored by the activity log alert.
         *
         * > **Note:** `resourceProvider` and `resourceProviders` are mutually exclusive.
         */
        resourceProviders?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The resource type monitored by the activity log alert.
         */
        resourceType?: pulumi.Input<string>;
        /**
         * A list of resource types monitored by the activity log alert.
         *
         * > **Note:** `resourceType` and `resourceTypes` are mutually exclusive.
         */
        resourceTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A block to define fine grain service health settings.
         */
        serviceHealth?: pulumi.Input<inputs.monitoring.ActivityLogAlertCriteriaServiceHealth>;
        /**
         * The status of the event. For example, `Started`, `Failed`, or `Succeeded`.
         */
        status?: pulumi.Input<string>;
        /**
         * A list of status of the event. For example, `Started`, `Failed`, or `Succeeded`.
         *
         * > **Note:** `status` and `statuses` are mutually exclusive.
         */
        statuses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The sub status of the event.
         */
        subStatus?: pulumi.Input<string>;
        /**
         * A list of sub status of the event.
         *
         * > **Note:** `subStatus` and `subStatuses` are mutually exclusive.
         */
        subStatuses?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ActivityLogAlertCriteriaResourceHealth {
        /**
         * The current resource health statuses that will log an alert. Possible values are `Available`, `Degraded`, `Unavailable` and `Unknown`.
         */
        currents?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The previous resource health statuses that will log an alert. Possible values are `Available`, `Degraded`, `Unavailable` and `Unknown`.
         */
        previouses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The reason that will log an alert. Possible values are `PlatformInitiated` (such as a problem with the resource in an affected region of an Azure incident), `UserInitiated` (such as a shutdown request of a VM) and `Unknown`.
         */
        reasons?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ActivityLogAlertCriteriaServiceHealth {
        /**
         * Events this alert will monitor Possible values are `Incident`, `Maintenance`, `Informational`, `ActionRequired` and `Security`.
         */
        events?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Locations this alert will monitor. For example, `West Europe`.
         */
        locations?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Services this alert will monitor. For example, `Activity Logs & Alerts`, `Action Groups`. Defaults to all Services.
         */
        services?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupCondition {
        /**
         * A `alertContext` block as defined above.
         */
        alertContext?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionAlertContext>;
        /**
         * A `alertRuleId` block as defined above.
         */
        alertRuleId?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionAlertRuleId>;
        /**
         * A `alertRuleName` block as defined above.
         */
        alertRuleName?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionAlertRuleName>;
        /**
         * A `description` block as defined below.
         */
        description?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionDescription>;
        /**
         * A `monitorCondition` block as defined below.
         */
        monitorCondition?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionMonitorCondition>;
        /**
         * A `monitorService` block as defined below.
         */
        monitorService?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionMonitorService>;
        /**
         * A `severity` block as defined below.
         */
        severity?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionSeverity>;
        /**
         * A `signalType` block as defined below.
         */
        signalType?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionSignalType>;
        /**
         * A `targetResource` block as defined below.
         */
        targetResource?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionTargetResource>;
        /**
         * A `targetResourceGroup` block as defined below.
         */
        targetResourceGroup?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionTargetResourceGroup>;
        /**
         * A `targetResourceType` block as defined below.
         *
         * > **Note:** At least one of the `alertContext`, `alertRuleId`, `alertRuleName`, `description`, `monitorCondition`, `monitorService`, `severity`, `signalType`, `targetResource`, `targetResourceGroup`, `targetResourceType` must be specified.
         */
        targetResourceType?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupConditionTargetResourceType>;
    }
    interface AlertProcessingRuleActionGroupConditionAlertContext {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionAlertRuleId {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionAlertRuleName {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionDescription {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionMonitorCondition {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition. Possible values are `Fired` and `Resolved`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionMonitorService {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. Possible values are `ActivityLog Administrative`, `ActivityLog Autoscale`, `ActivityLog Policy`, `ActivityLog Recommendation`, `ActivityLog Security`, `Application Insights`, `Azure Backup`, `Azure Stack Edge`, `Azure Stack Hub`, `Custom`, `Data Box Gateway`, `Health Platform`, `Log Alerts V2`, `Log Analytics`, `Platform`, `Prometheus`, `Resource Health`, `Smart Detector`, and `VM Insights - Health`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionSeverity {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies list of values to match for a given condition. Possible values are `Sev0`, `Sev1`, `Sev2`, `Sev3`, and `Sev4`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionSignalType {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition. Possible values are `Metric`, `Log`, `Unknown`, and `Health`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionTargetResource {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource IDs.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionTargetResourceGroup {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource group IDs.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupConditionTargetResourceType {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource types. (e.g. Microsoft.Compute/VirtualMachines)
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleActionGroupSchedule {
        /**
         * Specifies the Alert Processing Rule effective start time (Y-m-d'T'H:M:S).
         */
        effectiveFrom?: pulumi.Input<string>;
        /**
         * Specifies the Alert Processing Rule effective end time (Y-m-d'T'H:M:S).
         */
        effectiveUntil?: pulumi.Input<string>;
        /**
         * A `recurrence` block as defined above.
         */
        recurrence?: pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupScheduleRecurrence>;
        /**
         * The time zone (e.g. Pacific Standard time, Eastern Standard Time). Defaults to `UTC`. [possible values are defined here](https://docs.microsoft.com/en-us/previous-versions/windows/embedded/ms912391(v=winembedded.11)).
         */
        timeZone?: pulumi.Input<string>;
    }
    interface AlertProcessingRuleActionGroupScheduleRecurrence {
        /**
         * One or more `daily` blocks as defined above.
         */
        dailies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupScheduleRecurrenceDaily>[]>;
        /**
         * One or more `monthly` blocks as defined above.
         */
        monthlies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupScheduleRecurrenceMonthly>[]>;
        /**
         * One or more `weekly` blocks as defined below.
         */
        weeklies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleActionGroupScheduleRecurrenceWeekly>[]>;
    }
    interface AlertProcessingRuleActionGroupScheduleRecurrenceDaily {
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime: pulumi.Input<string>;
    }
    interface AlertProcessingRuleActionGroupScheduleRecurrenceMonthly {
        /**
         * Specifies a list of dayOfMonth to recurrence. Possible values are integers between `1` - `31`.
         */
        daysOfMonths: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime?: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime?: pulumi.Input<string>;
    }
    interface AlertProcessingRuleActionGroupScheduleRecurrenceWeekly {
        /**
         * Specifies a list of dayOfWeek to recurrence. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, and `Saturday`.
         */
        daysOfWeeks: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime?: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime?: pulumi.Input<string>;
    }
    interface AlertProcessingRuleSuppressionCondition {
        /**
         * A `alertContext` block as defined above.
         */
        alertContext?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionAlertContext>;
        /**
         * A `alertRuleId` block as defined above.
         */
        alertRuleId?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionAlertRuleId>;
        /**
         * A `alertRuleName` block as defined above.
         */
        alertRuleName?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionAlertRuleName>;
        /**
         * A `description` block as defined below.
         */
        description?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionDescription>;
        /**
         * A `monitorCondition` block as defined below.
         */
        monitorCondition?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionMonitorCondition>;
        /**
         * A `monitorService` block as defined below.
         */
        monitorService?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionMonitorService>;
        /**
         * A `severity` block as defined below.
         */
        severity?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionSeverity>;
        /**
         * A `signalType` block as defined below.
         */
        signalType?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionSignalType>;
        /**
         * A `targetResource` block as defined below.
         */
        targetResource?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionTargetResource>;
        /**
         * A `targetResourceGroup` block as defined below.
         */
        targetResourceGroup?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionTargetResourceGroup>;
        /**
         * A `targetResourceType` block as defined below.
         */
        targetResourceType?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionConditionTargetResourceType>;
    }
    interface AlertProcessingRuleSuppressionConditionAlertContext {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionAlertRuleId {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionAlertRuleName {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionDescription {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionMonitorCondition {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition. Possible values are `Fired` and `Resolved`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionMonitorService {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. Possible values are `ActivityLog Administrative`, `ActivityLog Autoscale`, `ActivityLog Policy`, `ActivityLog Recommendation`, `ActivityLog Security`, `Application Insights`, `Azure Backup`, `Azure Stack Edge`, `Azure Stack Hub`, `Custom`, `Data Box Gateway`, `Health Platform`, `Log Alerts V2`, `Log Analytics`, `Platform`, `Prometheus`, `Resource Health`, `Smart Detector`, and `VM Insights - Health`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionSeverity {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies list of values to match for a given condition. Possible values are `Sev0`, `Sev1`, `Sev2`, `Sev3`, and `Sev4`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionSignalType {
        /**
         * The operator for a given condition. Possible values are `Equals` and `NotEquals`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies a list of values to match for a given condition. Possible values are `Metric`, `Log`, `Unknown`, and `Health`.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionTargetResource {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource IDs.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionTargetResourceGroup {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource group IDs.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionConditionTargetResourceType {
        /**
         * The operator for a given condition. Possible values are `Equals`, `NotEquals`, `Contains`, and `DoesNotContain`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of values to match for a given condition. The values should be valid resource types. (e.g. Microsoft.Compute/VirtualMachines)
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertProcessingRuleSuppressionSchedule {
        /**
         * Specifies the Alert Processing Rule effective start time (Y-m-d'T'H:M:S).
         */
        effectiveFrom?: pulumi.Input<string>;
        /**
         * Specifies the Alert Processing Rule effective end time (Y-m-d'T'H:M:S).
         */
        effectiveUntil?: pulumi.Input<string>;
        /**
         * A `recurrence` block as defined above.
         */
        recurrence?: pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionScheduleRecurrence>;
        /**
         * The time zone (e.g. Pacific Standard time, Eastern Standard Time). Defaults to `UTC`. [possible values are defined here](https://docs.microsoft.com/en-us/previous-versions/windows/embedded/ms912391(v=winembedded.11)).
         */
        timeZone?: pulumi.Input<string>;
    }
    interface AlertProcessingRuleSuppressionScheduleRecurrence {
        /**
         * One or more `daily` blocks as defined above.
         */
        dailies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionScheduleRecurrenceDaily>[]>;
        /**
         * One or more `monthly` blocks as defined above.
         */
        monthlies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionScheduleRecurrenceMonthly>[]>;
        /**
         * One or more `weekly` blocks as defined below.
         */
        weeklies?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertProcessingRuleSuppressionScheduleRecurrenceWeekly>[]>;
    }
    interface AlertProcessingRuleSuppressionScheduleRecurrenceDaily {
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime: pulumi.Input<string>;
    }
    interface AlertProcessingRuleSuppressionScheduleRecurrenceMonthly {
        /**
         * Specifies a list of dayOfMonth to recurrence. Possible values are integers between `1` - `31`.
         */
        daysOfMonths: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime?: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime?: pulumi.Input<string>;
    }
    interface AlertProcessingRuleSuppressionScheduleRecurrenceWeekly {
        /**
         * Specifies a list of dayOfWeek to recurrence. Possible values are `Sunday`, `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, and `Saturday`.
         */
        daysOfWeeks: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the recurrence end time (H:M:S).
         */
        endTime?: pulumi.Input<string>;
        /**
         * Specifies the recurrence start time (H:M:S).
         */
        startTime?: pulumi.Input<string>;
    }
    interface AlertPrometheusRuleGroupRule {
        /**
         * An `action` block as defined below.
         */
        actions?: pulumi.Input<pulumi.Input<inputs.monitoring.AlertPrometheusRuleGroupRuleAction>[]>;
        /**
         * Specifies the Alert rule name.
         */
        alert?: pulumi.Input<string>;
        /**
         * An `alertResolution` block as defined below.
         */
        alertResolution?: pulumi.Input<inputs.monitoring.AlertPrometheusRuleGroupRuleAlertResolution>;
        /**
         * Specifies a set of informational labels that can be used to store longer additional information such as alert descriptions or runbook links.
         */
        annotations?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Is this rule enabled? Possible values are `true` and `false`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Specifies the Prometheus Query Language expression to evaluate. For more details see [this doc](https://prometheus.io/docs/prometheus/latest/querying/basics). Evaluate at the period given by `interval` and record the result as a new set of time series with the metric name given by `record`.
         */
        expression: pulumi.Input<string>;
        /**
         * Specifies the amount of time alert must be active before firing, represented in ISO 8601 duration format.
         */
        for?: pulumi.Input<string>;
        /**
         * Specifies the labels to add or overwrite before storing the result.
         */
        labels?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Specifies the recorded metrics name.
         */
        record?: pulumi.Input<string>;
        /**
         * Specifies the severity of the alerts fired by the rule. Possible values are between 0 and 4.
         */
        severity?: pulumi.Input<number>;
    }
    interface AlertPrometheusRuleGroupRuleAction {
        /**
         * Specifies the resource id of the monitor action group.
         */
        actionGroupId: pulumi.Input<string>;
        /**
         * Specifies the properties of an action group object.
         *
         * > **Note:** `actionProperties` can only be configured for IcM Connector Action Groups for now. Other public features will be supported in the future.
         */
        actionProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface AlertPrometheusRuleGroupRuleAlertResolution {
        /**
         * Is the alert auto-resolution? Possible values are `true` and `false`.
         */
        autoResolved?: pulumi.Input<boolean>;
        /**
         * Specifies the alert auto-resolution interval, represented in ISO 8601 duration format.
         */
        timeToResolve?: pulumi.Input<string>;
    }
    interface AutoscaleSettingNotification {
        /**
         * A `email` block as defined below.
         */
        email?: pulumi.Input<inputs.monitoring.AutoscaleSettingNotificationEmail>;
        /**
         * One or more `webhook` blocks as defined below.
         */
        webhooks?: pulumi.Input<pulumi.Input<inputs.monitoring.AutoscaleSettingNotificationWebhook>[]>;
    }
    interface AutoscaleSettingNotificationEmail {
        /**
         * Specifies a list of custom email addresses to which the email notifications will be sent.
         */
        customEmails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should email notifications be sent to the subscription administrator? Defaults to `false`.
         */
        sendToSubscriptionAdministrator?: pulumi.Input<boolean>;
        /**
         * Should email notifications be sent to the subscription co-administrator? Defaults to `false`.
         */
        sendToSubscriptionCoAdministrator?: pulumi.Input<boolean>;
    }
    interface AutoscaleSettingNotificationWebhook {
        /**
         * A map of settings.
         */
        properties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The HTTPS URI which should receive scale notifications.
         */
        serviceUri: pulumi.Input<string>;
    }
    interface AutoscaleSettingPredictive {
        /**
         * Specifies the amount of time by which instances are launched in advance. It must be between `PT1M` and `PT1H` in ISO 8601 format.
         */
        lookAheadTime?: pulumi.Input<string>;
        /**
         * Specifies the predictive scale mode. Possible values are `Enabled` or `ForecastOnly`.
         */
        scaleMode: pulumi.Input<string>;
    }
    interface AutoscaleSettingProfile {
        /**
         * A `capacity` block as defined below.
         */
        capacity: pulumi.Input<inputs.monitoring.AutoscaleSettingProfileCapacity>;
        /**
         * A `fixedDate` block as defined below. This cannot be specified if a `recurrence` block is specified.
         */
        fixedDate?: pulumi.Input<inputs.monitoring.AutoscaleSettingProfileFixedDate>;
        /**
         * Specifies the name of the profile.
         */
        name: pulumi.Input<string>;
        /**
         * A `recurrence` block as defined below. This cannot be specified if a `fixedDate` block is specified.
         */
        recurrence?: pulumi.Input<inputs.monitoring.AutoscaleSettingProfileRecurrence>;
        /**
         * One or more (up to 10) `rule` blocks as defined below.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.monitoring.AutoscaleSettingProfileRule>[]>;
    }
    interface AutoscaleSettingProfileCapacity {
        /**
         * The number of instances that are available for scaling if metrics are not available for evaluation. The default is only used if the current instance count is lower than the default. Valid values are between `0` and `1000`.
         */
        default: pulumi.Input<number>;
        /**
         * The maximum number of instances for this resource. Valid values are between `0` and `1000`.
         *
         * > **Note:** The maximum number of instances is also limited by the amount of Cores available in the subscription.
         */
        maximum: pulumi.Input<number>;
        /**
         * The minimum number of instances for this resource. Valid values are between `0` and `1000`.
         */
        minimum: pulumi.Input<number>;
    }
    interface AutoscaleSettingProfileFixedDate {
        /**
         * Specifies the end date for the profile, formatted as an RFC3339 date string.
         */
        end: pulumi.Input<string>;
        /**
         * Specifies the start date for the profile, formatted as an RFC3339 date string.
         */
        start: pulumi.Input<string>;
        /**
         * The Time Zone of the `start` and `end` times. A list of [possible values can be found here](https://learn.microsoft.com/en-us/rest/api/monitor/autoscale-settings/create-or-update?view=rest-monitor-2022-10-01&tabs=HTTP#recurrentschedule). Defaults to `UTC`.
         */
        timezone?: pulumi.Input<string>;
    }
    interface AutoscaleSettingProfileRecurrence {
        /**
         * A list of days that this profile takes effect on. Possible values include `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        days: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list containing a single item, which specifies the Hour interval at which this recurrence should be triggered (in 24-hour time). Possible values are from `0` to `23`.
         */
        hours: pulumi.Input<number>;
        /**
         * A list containing a single item which specifies the Minute interval at which this recurrence should be triggered.
         */
        minutes: pulumi.Input<number>;
        /**
         * The Time Zone used for the `hours` field. A list of possible values can be found here). Defaults to `UTC`.
         */
        timezone?: pulumi.Input<string>;
    }
    interface AutoscaleSettingProfileRule {
        /**
         * A `metricTrigger` block as defined below.
         */
        metricTrigger: pulumi.Input<inputs.monitoring.AutoscaleSettingProfileRuleMetricTrigger>;
        /**
         * A `scaleAction` block as defined below.
         */
        scaleAction: pulumi.Input<inputs.monitoring.AutoscaleSettingProfileRuleScaleAction>;
    }
    interface AutoscaleSettingProfileRuleMetricTrigger {
        /**
         * One or more `dimensions` block as defined below.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.monitoring.AutoscaleSettingProfileRuleMetricTriggerDimension>[]>;
        /**
         * Whether to enable metric divide by instance count.
         */
        divideByInstanceCount?: pulumi.Input<boolean>;
        /**
         * The name of the metric that defines what the rule monitors, such as `Percentage CPU` for `Virtual Machine Scale Sets` and `CpuPercentage` for `App Service Plan`.
         *
         * > **Note:** The allowed value of `metricName` highly depends on the targeting resource type, please visit [Supported metrics with Azure Monitor](https://docs.microsoft.com/azure/azure-monitor/platform/metrics-supported) for more details.
         */
        metricName: pulumi.Input<string>;
        /**
         * The namespace of the metric that defines what the rule monitors, such as `microsoft.compute/virtualmachinescalesets` for `Virtual Machine Scale Sets`.
         */
        metricNamespace?: pulumi.Input<string>;
        /**
         * The ID of the Resource which the Rule monitors.
         */
        metricResourceId: pulumi.Input<string>;
        /**
         * Specifies the operator used to compare the metric data and threshold. Possible values are: `Equals`, `NotEquals`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan`, `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * Specifies how the metrics from multiple instances are combined. Possible values are `Average`, `Max`, `Min` and `Sum`.
         */
        statistic: pulumi.Input<string>;
        /**
         * Specifies the threshold of the metric that triggers the scale action.
         */
        threshold: pulumi.Input<number>;
        /**
         * Specifies how the data that's collected should be combined over time. Possible values include `Average`, `Count`, `Maximum`, `Minimum`, `Last` and `Total`.
         */
        timeAggregation: pulumi.Input<string>;
        /**
         * Specifies the granularity of metrics that the rule monitors, which must be one of the pre-defined values returned from the metric definitions for the metric. This value must be between 1 minute and 12 hours an be formatted as an ISO 8601 string.
         */
        timeGrain: pulumi.Input<string>;
        /**
         * Specifies the time range for which data is collected, which must be greater than the delay in metric collection (which varies from resource to resource). This value must be between 5 minutes and 12 hours and be formatted as an ISO 8601 string.
         */
        timeWindow: pulumi.Input<string>;
    }
    interface AutoscaleSettingProfileRuleMetricTriggerDimension {
        /**
         * The name of the dimension.
         */
        name: pulumi.Input<string>;
        /**
         * The dimension operator. Possible values are `Equals` and `NotEquals`. `Equals` means being equal to any of the values. `NotEquals` means being not equal to any of the values.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of dimension values.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AutoscaleSettingProfileRuleScaleAction {
        /**
         * The amount of time to wait since the last scaling action before this action occurs. Must be between 1 minute and 1 week and formatted as a ISO 8601 string.
         */
        cooldown: pulumi.Input<string>;
        /**
         * The scale direction. Possible values are `Increase` and `Decrease`.
         */
        direction: pulumi.Input<string>;
        /**
         * The type of action that should occur. Possible values are `ChangeCount`, `ExactCount`, `PercentChangeCount` and `ServiceAllowedNextValue`.
         */
        type: pulumi.Input<string>;
        /**
         * The number of instances involved in the scaling action.
         */
        value: pulumi.Input<number>;
    }
    interface DataCollectionRuleDataFlow {
        /**
         * The built-in transform to transform stream data.
         */
        builtInTransform?: pulumi.Input<string>;
        /**
         * Specifies a list of destination names. A `azureMonitorMetrics` data source only allows for stream of kind `Microsoft-InsightsMetrics`.
         */
        destinations: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The output stream of the transform. Only required if the data flow changes data to a different stream.
         */
        outputStream?: pulumi.Input<string>;
        /**
         * Specifies a list of streams. Possible values include but not limited to `Microsoft-Event`, `Microsoft-InsightsMetrics`, `Microsoft-Perf`, `Microsoft-Syslog`, `Microsoft-WindowsEvent`, and `Microsoft-PrometheusMetrics`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The KQL query to transform stream data.
         */
        transformKql?: pulumi.Input<string>;
    }
    interface DataCollectionRuleDataSources {
        /**
         * A `dataImport` block as defined above.
         */
        dataImport?: pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesDataImport>;
        /**
         * One or more `extension` blocks as defined below.
         */
        extensions?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesExtension>[]>;
        /**
         * One or more `iisLog` blocks as defined below.
         */
        iisLogs?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesIisLog>[]>;
        /**
         * One or more `logFile` blocks as defined below.
         */
        logFiles?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesLogFile>[]>;
        /**
         * One or more `performanceCounter` blocks as defined below.
         */
        performanceCounters?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesPerformanceCounter>[]>;
        /**
         * One or more `platformTelemetry` blocks as defined below.
         */
        platformTelemetries?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesPlatformTelemetry>[]>;
        /**
         * One or more `prometheusForwarder` blocks as defined below.
         */
        prometheusForwarders?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesPrometheusForwarder>[]>;
        /**
         * One or more `syslog` blocks as defined below.
         */
        syslogs?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesSyslog>[]>;
        /**
         * One or more `windowsEventLog` blocks as defined below.
         */
        windowsEventLogs?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesWindowsEventLog>[]>;
        /**
         * One or more `windowsFirewallLog` blocks as defined below.
         */
        windowsFirewallLogs?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesWindowsFirewallLog>[]>;
    }
    interface DataCollectionRuleDataSourcesDataImport {
        /**
         * An `eventHubDataSource` block as defined below.
         */
        eventHubDataSources: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesDataImportEventHubDataSource>[]>;
    }
    interface DataCollectionRuleDataSourcesDataImportEventHubDataSource {
        /**
         * The Event Hub consumer group name.
         */
        consumerGroup?: pulumi.Input<string>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The stream to collect from Event Hub. Possible value should be a custom stream name.
         */
        stream: pulumi.Input<string>;
    }
    interface DataCollectionRuleDataSourcesExtension {
        /**
         * A JSON String which specifies the extension setting.
         */
        extensionJson?: pulumi.Input<string>;
        /**
         * The name of the VM extension.
         */
        extensionName: pulumi.Input<string>;
        /**
         * Specifies a list of data sources this extension needs data from. An item should be a name of a supported data source which produces only one stream. Supported data sources type: `performanceCounter`, `windowsEventLog`,and `syslog`.
         */
        inputDataSources?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-Event`, `Microsoft-InsightsMetrics`, `Microsoft-Perf`, `Microsoft-Syslog`, `Microsoft-WindowsEvent`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesIisLog {
        /**
         * Specifies a list of absolute paths where the log files are located.
         */
        logDirectories?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is `Microsoft-W3CIISLog`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesLogFile {
        /**
         * Specifies a list of file patterns where the log files are located. For example, `C:\\JavaLogs\\*.log`.
         */
        filePatterns: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The data format of the log files. Possible values are `text` and `json`.
         */
        format: pulumi.Input<string>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * A `settings` block as defined below.
         */
        settings?: pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesLogFileSettings>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value should be custom stream names.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesLogFileSettings {
        /**
         * A `text` block as defined below.
         */
        text: pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesLogFileSettingsText>;
    }
    interface DataCollectionRuleDataSourcesLogFileSettingsText {
        /**
         * The timestamp format of the text log files. Possible values are `ISO 8601`, `YYYY-MM-DD HH:MM:SS`, `M/D/YYYY HH:MM:SS AM/PM`, `Mon DD, YYYY HH:MM:SS`, `yyMMdd HH:mm:ss`, `ddMMyy HH:mm:ss`, `MMM d hh:mm:ss`, `dd/MMM/yyyy:HH:mm:ss zzz`,and `yyyy-MM-ddTHH:mm:ssK`.
         */
        recordStartTimestampFormat: pulumi.Input<string>;
    }
    interface DataCollectionRuleDataSourcesPerformanceCounter {
        /**
         * Specifies a list of specifier names of the performance counters you want to collect. To get a list of performance counters on Windows, run the command `typeperf`. Please see [this document](https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-sources-performance-counters#configure-performance-counters) for more information.
         */
        counterSpecifiers: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The number of seconds between consecutive counter measurements (samples). The value should be integer between `1` and `1800` inclusive. `samplingFrequencyInSeconds` must be equal to `60` seconds for counters collected with `Microsoft-InsightsMetrics` stream.
         */
        samplingFrequencyInSeconds: pulumi.Input<number>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-InsightsMetrics`,and `Microsoft-Perf`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesPlatformTelemetry {
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft.Cache/redis:Metrics-Group-All`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesPrometheusForwarder {
        /**
         * One or more `labelIncludeFilter` blocks as defined above.
         */
        labelIncludeFilters?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter>[]>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible value is `Microsoft-PrometheusMetrics`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesPrometheusForwarderLabelIncludeFilter {
        /**
         * The label of the filter. This label should be unique across all `labelIncludeFileter` block. Possible value is `microsoftMetricsIncludeLabel`.
         */
        label: pulumi.Input<string>;
        /**
         * The value of the filter.
         */
        value: pulumi.Input<string>;
    }
    interface DataCollectionRuleDataSourcesSyslog {
        /**
         * Specifies a list of facility names. Use a wildcard `*` to collect logs for all facility names. Possible values are `alert`, `*`, `audit`, `auth`, `authpriv`, `clock`, `cron`, `daemon`, `ftp`, `kern`, `local5`, `local4`, `local1`, `local7`, `local6`, `local3`, `local2`, `local0`, `lpr`, `mail`, `mark`, `news`, `nopri`, `ntp`, `syslog`, `user` and `uucp`.
         */
        facilityNames: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of log levels. Use a wildcard `*` to collect logs for all log levels. Possible values are `Debug`, `Info`, `Notice`, `Warning`, `Error`, `Critical`, `Alert`, `Emergency`,and `*`.
         */
        logLevels: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-Syslog`,and `Microsoft-CiscoAsa`, and `Microsoft-CommonSecurityLog`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesWindowsEventLog {
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to. Possible values include but not limited to `Microsoft-Event`,and `Microsoft-WindowsEvent` and `Microsoft-SecurityEvent`.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Windows Event Log queries in XPath expression. Please see [this document](https://learn.microsoft.com/en-us/azure/azure-monitor/agents/data-collection-rule-azure-monitor-agent?tabs=cli#filter-events-using-xpath-queries) for more information.
         */
        xPathQueries: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDataSourcesWindowsFirewallLog {
        /**
         * The name which should be used for this data source. This name should be unique across all data sources regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of streams that this data source will be sent to. A stream indicates what schema will be used for this data and usually what table in Log Analytics the data will be sent to.
         */
        streams: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataCollectionRuleDestinations {
        /**
         * A `azureMonitorMetrics` block as defined above.
         */
        azureMonitorMetrics?: pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsAzureMonitorMetrics>;
        /**
         * One or more `eventHub` blocks as defined below.
         */
        eventHub?: pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsEventHub>;
        /**
         * One or more `eventHub` blocks as defined below.
         */
        eventHubDirect?: pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsEventHubDirect>;
        /**
         * One or more `logAnalytics` blocks as defined below.
         */
        logAnalytics?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsLogAnalytic>[]>;
        /**
         * One or more `monitorAccount` blocks as defined below.
         */
        monitorAccounts?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsMonitorAccount>[]>;
        /**
         * One or more `storageBlobDirect` blocks as defined below.
         */
        storageBlobDirects?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsStorageBlobDirect>[]>;
        /**
         * One or more `storageBlob` blocks as defined below.
         */
        storageBlobs?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsStorageBlob>[]>;
        /**
         * One or more `storageTableDirect` blocks as defined below.
         *
         * > **Note:** `eventHubDirect`, `storageBlobDirect`, and `storageTableDirect` are only available for rules of kind `AgentDirectToStore`.
         *
         * > **Note:** At least one of `azureMonitorMetrics`, `eventHub`, `eventHubDirect`, `logAnalytics`, `monitorAccount`, `storageBlob`, `storageBlobDirect`,and `storageTableDirect` blocks must be specified.
         */
        storageTableDirects?: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleDestinationsStorageTableDirect>[]>;
    }
    interface DataCollectionRuleDestinationsAzureMonitorMetrics {
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsEventHub {
        /**
         * The resource ID of the Event Hub.
         */
        eventHubId: pulumi.Input<string>;
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsEventHubDirect {
        /**
         * The resource ID of the Event Hub.
         */
        eventHubId: pulumi.Input<string>;
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsLogAnalytic {
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of a Log Analytic Workspace resource.
         */
        workspaceResourceId: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsMonitorAccount {
        /**
         * The resource ID of the Monitor Account.
         */
        monitorAccountId: pulumi.Input<string>;
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsStorageBlob {
        /**
         * The Storage Container name.
         */
        containerName: pulumi.Input<string>;
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The resource ID of the Storage Account.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsStorageBlobDirect {
        /**
         * The Storage Container name.
         */
        containerName: pulumi.Input<string>;
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The resource ID of the Storage Account.
         */
        storageAccountId: pulumi.Input<string>;
    }
    interface DataCollectionRuleDestinationsStorageTableDirect {
        /**
         * The name which should be used for this destination. This name should be unique across all destinations regardless of type within the Data Collection Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The resource ID of the Storage Account.
         */
        storageAccountId: pulumi.Input<string>;
        /**
         * The Storage Table name.
         */
        tableName: pulumi.Input<string>;
    }
    interface DataCollectionRuleIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Data Collection Rule. Currently, up to 1 identity is supported.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Data Collection Rule. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface DataCollectionRuleStreamDeclaration {
        /**
         * One or more `column` blocks as defined above.
         */
        columns: pulumi.Input<pulumi.Input<inputs.monitoring.DataCollectionRuleStreamDeclarationColumn>[]>;
        /**
         * The name of the custom stream. This name should be unique across all `streamDeclaration` blocks and must begin with a prefix of `Custom-`.
         */
        streamName: pulumi.Input<string>;
    }
    interface DataCollectionRuleStreamDeclarationColumn {
        /**
         * The name of the column.
         */
        name: pulumi.Input<string>;
        /**
         * The type of the column data. Possible values are `string`, `int`, `long`, `real`, `boolean`, `datetime`,and `dynamic`.
         */
        type: pulumi.Input<string>;
    }
    interface DiagnosticSettingEnabledLog {
        /**
         * The name of a Diagnostic Log Category for this Resource.
         *
         * > **NOTE:** The Log Categories available vary depending on the Resource being used. You may wish to use the `azure.monitoring.getDiagnosticCategories` Data Source or [list of service specific schemas](https://docs.microsoft.com/azure/azure-monitor/platform/resource-logs-schema#service-specific-schemas) to identify which categories are available for a given Resource.
         */
        category?: pulumi.Input<string>;
        /**
         * The name of a Diagnostic Log Category Group for this Resource.
         *
         * > **NOTE:** Not all resources have category groups available.
         *
         * > **NOTE:** Exactly one of `category` or `categoryGroup` must be specified.
         */
        categoryGroup?: pulumi.Input<string>;
        /**
         * @deprecated `retentionPolicy` has been deprecated in favour of `azure.storage.ManagementPolicy` resource and will be removed in v5.0 of the AzureRM provider - to learn more https://aka.ms/diagnostic_settings_log_retention
         */
        retentionPolicy?: pulumi.Input<inputs.monitoring.DiagnosticSettingEnabledLogRetentionPolicy>;
    }
    interface DiagnosticSettingEnabledLogRetentionPolicy {
        days?: pulumi.Input<number>;
        enabled: pulumi.Input<boolean>;
    }
    interface DiagnosticSettingEnabledMetric {
        /**
         * The name of a Diagnostic Metric Category for this Resource.
         *
         * > **NOTE:** The Metric Categories available vary depending on the Resource being used. You may wish to use the `azure.monitoring.getDiagnosticCategories` Data Source to identify which categories are available for a given Resource.
         */
        category: pulumi.Input<string>;
    }
    interface DiagnosticSettingMetric {
        category: pulumi.Input<string>;
        enabled?: pulumi.Input<boolean>;
        /**
         * @deprecated `retentionPolicy` has been deprecated in favour of the `azure.storage.ManagementPolicy` resource and will be removed in v5.0 of the AzureRM provider - to learn more go to https://aka.ms/diagnostic_settings_log_retention
         */
        retentionPolicy?: pulumi.Input<inputs.monitoring.DiagnosticSettingMetricRetentionPolicy>;
    }
    interface DiagnosticSettingMetricRetentionPolicy {
        days?: pulumi.Input<number>;
        enabled: pulumi.Input<boolean>;
    }
    interface MetricAlertAction {
        /**
         * The ID of the Action Group can be sourced from the `azure.monitoring.ActionGroup` resource
         */
        actionGroupId: pulumi.Input<string>;
        /**
         * The map of custom string properties to include with the post operation. These data are appended to the webhook payload.
         */
        webhookProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface MetricAlertApplicationInsightsWebTestLocationAvailabilityCriteria {
        /**
         * The ID of the Application Insights Resource.
         */
        componentId: pulumi.Input<string>;
        /**
         * The number of failed locations.
         */
        failedLocationCount: pulumi.Input<number>;
        /**
         * The ID of the Application Insights Web Test.
         */
        webTestId: pulumi.Input<string>;
    }
    interface MetricAlertCriteria {
        /**
         * The statistic that runs over the metric values. Possible values are `Average`, `Count`, `Minimum`, `Maximum` and `Total`.
         */
        aggregation: pulumi.Input<string>;
        /**
         * One or more `dimension` blocks as defined below.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.monitoring.MetricAlertCriteriaDimension>[]>;
        /**
         * One of the metric names to be monitored.
         */
        metricName: pulumi.Input<string>;
        /**
         * One of the metric namespaces to be monitored.
         */
        metricNamespace: pulumi.Input<string>;
        /**
         * The criteria operator. Possible values are `Equals`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan` and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * Skip the metric validation to allow creating an alert rule on a custom metric that isn't yet emitted? Defaults to `false`.
         */
        skipMetricValidation?: pulumi.Input<boolean>;
        /**
         * The criteria threshold value that activates the alert.
         */
        threshold: pulumi.Input<number>;
    }
    interface MetricAlertCriteriaDimension {
        /**
         * One of the dimension names.
         */
        name: pulumi.Input<string>;
        /**
         * The dimension operator. Possible values are `Include`, `Exclude` and `StartsWith`.
         */
        operator: pulumi.Input<string>;
        /**
         * The list of dimension values.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface MetricAlertDynamicCriteria {
        /**
         * The statistic that runs over the metric values. Possible values are `Average`, `Count`, `Minimum`, `Maximum` and `Total`.
         */
        aggregation: pulumi.Input<string>;
        /**
         * The extent of deviation required to trigger an alert. Possible values are `Low`, `Medium` and `High`.
         */
        alertSensitivity: pulumi.Input<string>;
        /**
         * One or more `dimension` blocks as defined below.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.monitoring.MetricAlertDynamicCriteriaDimension>[]>;
        /**
         * The number of violations to trigger an alert. Should be smaller or equal to `evaluationTotalCount`. Defaults to `4`.
         */
        evaluationFailureCount?: pulumi.Input<number>;
        /**
         * The number of aggregated lookback points. The lookback time window is calculated based on the aggregation granularity (`windowSize`) and the selected number of aggregated points. Defaults to `4`.
         */
        evaluationTotalCount?: pulumi.Input<number>;
        /**
         * The [ISO8601](https://en.wikipedia.org/wiki/ISO_8601) date from which to start learning the metric historical data and calculate the dynamic thresholds.
         */
        ignoreDataBefore?: pulumi.Input<string>;
        /**
         * One of the metric names to be monitored.
         */
        metricName: pulumi.Input<string>;
        /**
         * One of the metric namespaces to be monitored.
         */
        metricNamespace: pulumi.Input<string>;
        /**
         * The criteria operator. Possible values are `LessThan`, `GreaterThan` and `GreaterOrLessThan`.
         */
        operator: pulumi.Input<string>;
        /**
         * Skip the metric validation to allow creating an alert rule on a custom metric that isn't yet emitted?
         */
        skipMetricValidation?: pulumi.Input<boolean>;
    }
    interface MetricAlertDynamicCriteriaDimension {
        /**
         * One of the dimension names.
         */
        name: pulumi.Input<string>;
        /**
         * The dimension operator. Possible values are `Include`, `Exclude` and `StartsWith`.
         */
        operator: pulumi.Input<string>;
        /**
         * The list of dimension values.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ScheduledQueryRulesAlertAction {
        /**
         * List of action group reference resource IDs.
         */
        actionGroups: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Custom payload to be sent for all webhook payloads in alerting action.
         */
        customWebhookPayload?: pulumi.Input<string>;
        /**
         * Custom subject override for all email ids in Azure action group.
         */
        emailSubject?: pulumi.Input<string>;
    }
    interface ScheduledQueryRulesAlertTrigger {
        /**
         * A `metricTrigger` block as defined above. Trigger condition for metric query rule.
         */
        metricTrigger?: pulumi.Input<inputs.monitoring.ScheduledQueryRulesAlertTriggerMetricTrigger>;
        /**
         * Evaluation operation for rule - 'GreaterThan', GreaterThanOrEqual', 'LessThan', or 'LessThanOrEqual'.
         */
        operator: pulumi.Input<string>;
        /**
         * Result or count threshold based on which rule should be triggered. Values must be between 0 and 10000 inclusive.
         */
        threshold: pulumi.Input<number>;
    }
    interface ScheduledQueryRulesAlertTriggerMetricTrigger {
        /**
         * Evaluation of metric on a particular column.
         */
        metricColumn?: pulumi.Input<string>;
        /**
         * Metric Trigger Type - 'Consecutive' or 'Total'.
         */
        metricTriggerType: pulumi.Input<string>;
        /**
         * Evaluation operation for rule - 'Equal', 'GreaterThan', GreaterThanOrEqual', 'LessThan', or 'LessThanOrEqual'.
         */
        operator: pulumi.Input<string>;
        /**
         * The threshold of the metric trigger. Values must be between 0 and 10000 inclusive.
         */
        threshold: pulumi.Input<number>;
    }
    interface ScheduledQueryRulesAlertV2Action {
        /**
         * List of Action Group resource IDs to invoke when the alert fires.
         */
        actionGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the properties of an alert payload.
         */
        customProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Custom subject override for all email ids in Azure action group.
         */
        emailSubject?: pulumi.Input<string>;
    }
    interface ScheduledQueryRulesAlertV2Criteria {
        /**
         * A `dimension` block as defined below.
         */
        dimensions?: pulumi.Input<pulumi.Input<inputs.monitoring.ScheduledQueryRulesAlertV2CriteriaDimension>[]>;
        /**
         * A `failingPeriods` block as defined below.
         */
        failingPeriods?: pulumi.Input<inputs.monitoring.ScheduledQueryRulesAlertV2CriteriaFailingPeriods>;
        /**
         * Specifies the column containing the metric measure number.
         *
         * > **Note:** `metricMeasureColumn` is required if `timeAggregationMethod` is `Average`, `Maximum`, `Minimum`, or `Total`. And `metricMeasureColumn` can not be specified if `timeAggregationMethod` is `Count`.
         */
        metricMeasureColumn?: pulumi.Input<string>;
        /**
         * Specifies the criteria operator. Possible values are `Equal`, `GreaterThan`, `GreaterThanOrEqual`, `LessThan`,and `LessThanOrEqual`.
         */
        operator: pulumi.Input<string>;
        /**
         * The query to run on logs. The results returned by this query are used to populate the alert.
         */
        query: pulumi.Input<string>;
        /**
         * Specifies the column containing the resource ID. The content of the column must be an uri formatted as resource ID.
         */
        resourceIdColumn?: pulumi.Input<string>;
        /**
         * Specifies the criteria threshold value that activates the alert.
         */
        threshold: pulumi.Input<number>;
        /**
         * The type of aggregation to apply to the data points in aggregation granularity. Possible values are `Average`, `Count`, `Maximum`, `Minimum`,and `Total`.
         */
        timeAggregationMethod: pulumi.Input<string>;
    }
    interface ScheduledQueryRulesAlertV2CriteriaDimension {
        /**
         * Name of the dimension.
         */
        name: pulumi.Input<string>;
        /**
         * Operator for dimension values. Possible values are `Exclude`,and `Include`.
         */
        operator: pulumi.Input<string>;
        /**
         * List of dimension values. Use a wildcard `*` to collect all.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ScheduledQueryRulesAlertV2CriteriaFailingPeriods {
        /**
         * Specifies the number of violations to trigger an alert. Should be smaller or equal to `numberOfEvaluationPeriods`. Possible value is integer between 1 and 6.
         */
        minimumFailingPeriodsToTriggerAlert: pulumi.Input<number>;
        /**
         * Specifies the number of aggregated look-back points. The look-back time window is calculated based on the aggregation granularity `windowDuration` and the selected number of aggregated points. Possible value is integer between 1 and 6.
         *
         * > **Note:** The query look back which is `windowDuration`*`numberOfEvaluationPeriods` cannot exceed 48 hours.
         *
         * > **Note:** `numberOfEvaluationPeriods` must be `1` for queries that do not project timestamp column
         */
        numberOfEvaluationPeriods: pulumi.Input<number>;
    }
    interface ScheduledQueryRulesAlertV2Identity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Scheduled Query Rule.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`. The identity associated must have required roles, read the [Azure documentation](https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-create-log-alert-rule#configure-the-alert-rule-details) for more information.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this App Service slot.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this App Service slot.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Scheduled Query Rule. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ScheduledQueryRulesLogCriteria {
        /**
         * A `dimension` block as defined below.
         */
        dimensions: pulumi.Input<pulumi.Input<inputs.monitoring.ScheduledQueryRulesLogCriteriaDimension>[]>;
        /**
         * Name of the metric. Supported metrics are listed in the Azure Monitor [Microsoft.OperationalInsights/workspaces](https://docs.microsoft.com/azure/azure-monitor/platform/metrics-supported#microsoftoperationalinsightsworkspaces) metrics namespace.
         */
        metricName: pulumi.Input<string>;
    }
    interface ScheduledQueryRulesLogCriteriaDimension {
        /**
         * Name of the dimension.
         */
        name: pulumi.Input<string>;
        /**
         * Operator for dimension values, - 'Include'. Defaults to `Include`.
         */
        operator?: pulumi.Input<string>;
        /**
         * List of dimension values.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SmartDetectorAlertRuleActionGroup {
        /**
         * Specifies a custom email subject if Email Receiver is specified in Monitor Action Group resource.
         */
        emailSubject?: pulumi.Input<string>;
        /**
         * Specifies the action group ids.
         */
        ids: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A JSON String which Specifies the custom webhook payload if Webhook Receiver is specified in Monitor Action Group resource.
         */
        webhookPayload?: pulumi.Input<string>;
    }
}
export declare namespace mssql {
    interface DatabaseIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this SQL Database.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this SQL Database. Possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface DatabaseImport {
        /**
         * Specifies the name of the SQL administrator.
         */
        administratorLogin: pulumi.Input<string>;
        /**
         * Specifies the password of the SQL administrator.
         */
        administratorLoginPassword: pulumi.Input<string>;
        /**
         * Specifies the type of authentication used to access the server. Valid values are `SQL` or `ADPassword`.
         */
        authenticationType: pulumi.Input<string>;
        /**
         * The resource id for the storage account used to store BACPAC file. If set, private endpoint connection will be created for the storage account. Must match storage account used for storageUri parameter.
         */
        storageAccountId?: pulumi.Input<string>;
        /**
         * Specifies the access key for the storage account.
         */
        storageKey: pulumi.Input<string>;
        /**
         * Specifies the type of access key for the storage account. Valid values are `StorageAccessKey` or `SharedAccessKey`.
         */
        storageKeyType: pulumi.Input<string>;
        /**
         * Specifies the blob URI of the .bacpac file.
         */
        storageUri: pulumi.Input<string>;
    }
    interface DatabaseLongTermRetentionPolicy {
        /**
         * Specifies if the backups are immutable. Defaults to `false`.
         */
        immutableBackupsEnabled?: pulumi.Input<boolean>;
        /**
         * The monthly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 120 months. e.g. `P1Y`, `P1M`, `P4W` or `P30D`. Defaults to `PT0S`.
         */
        monthlyRetention?: pulumi.Input<string>;
        /**
         * The week of year to take the yearly backup. Value has to be between `1` and `52`.
         */
        weekOfYear?: pulumi.Input<number>;
        /**
         * The weekly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 520 weeks. e.g. `P1Y`, `P1M`, `P1W` or `P7D`. Defaults to `PT0S`.
         */
        weeklyRetention?: pulumi.Input<string>;
        /**
         * The yearly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 10 years. e.g. `P1Y`, `P12M`, `P52W` or `P365D`. Defaults to `PT0S`.
         */
        yearlyRetention?: pulumi.Input<string>;
    }
    interface DatabaseShortTermRetentionPolicy {
        /**
         * The hours between each differential backup. This is only applicable to live databases but not dropped databases. Value has to be `12` or `24`. Defaults to `12` hours.
         */
        backupIntervalInHours?: pulumi.Input<number>;
        /**
         * Point In Time Restore configuration. Value has to be between `1` and `35`.
         */
        retentionDays: pulumi.Input<number>;
    }
    interface DatabaseThreatDetectionPolicy {
        /**
         * Specifies a list of alerts which should be disabled. Possible values include `Access_Anomaly`, `Sql_Injection` and `Sql_Injection_Vulnerability`.
         */
        disabledAlerts?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the account administrators be emailed when this alert is triggered? Possible values are `Enabled` or `Disabled`. Defaults to `Disabled`.
         */
        emailAccountAdmins?: pulumi.Input<string>;
        /**
         * A list of email addresses which alerts should be sent to.
         */
        emailAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the number of days to keep in the Threat Detection audit logs.
         */
        retentionDays?: pulumi.Input<number>;
        /**
         * The State of the Policy. Possible values are `Enabled` or `Disabled`. Defaults to `Disabled`.
         */
        state?: pulumi.Input<string>;
        /**
         * Specifies the identifier key of the Threat Detection audit storage account. Required if `state` is `Enabled`.
         */
        storageAccountAccessKey?: pulumi.Input<string>;
        /**
         * Specifies the blob storage endpoint (e.g. <https://example.blob.core.windows.net>). This blob storage will hold all Threat Detection audit logs. Required if `state` is `Enabled`.
         */
        storageEndpoint?: pulumi.Input<string>;
    }
    interface DatabaseVulnerabilityAssessmentRuleBaselineBaselineResult {
        /**
         * A list representing a result of the baseline.
         */
        results: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ElasticPoolPerDatabaseSettings {
        /**
         * The maximum capacity any one database can consume.
         */
        maxCapacity: pulumi.Input<number>;
        /**
         * The minimum capacity all databases are guaranteed.
         */
        minCapacity: pulumi.Input<number>;
    }
    interface ElasticPoolSku {
        /**
         * The scale up/out capacity, representing server's compute units. For more information see the documentation for your Elasticpool configuration: [vCore-based](https://docs.microsoft.com/azure/sql-database/sql-database-vcore-resource-limits-elastic-pools) or [DTU-based](https://docs.microsoft.com/azure/sql-database/sql-database-dtu-resource-limits-elastic-pools).
         */
        capacity: pulumi.Input<number>;
        /**
         * The `family` of hardware `Gen4`, `Gen5`, `Fsv2`, `MOPRMS`, `PRMS`, or `DC`.
         */
        family?: pulumi.Input<string>;
        /**
         * Specifies the SKU Name for this Elasticpool. The name of the SKU, will be either `vCore` based or `DTU` based. Possible `DTU` based values are `BasicPool`, `StandardPool`, `PremiumPool` while possible `vCore` based values are `GP_Gen4`, `GP_Gen5`, `GP_Fsv2`, `GP_DC`, `BC_Gen4`, `BC_Gen5`, `BC_DC`, `HS_PRMS`, `HS_MOPRMS`, or `HS_Gen5`.
         */
        name: pulumi.Input<string>;
        /**
         * The tier of the particular SKU. Possible values are `GeneralPurpose`, `BusinessCritical`, `Basic`, `Standard`, `Premium`, or `Hyperscale`. For more information see the documentation for your Elasticpool configuration: [vCore-based](https://docs.microsoft.com/azure/sql-database/sql-database-vcore-resource-limits-elastic-pools) or [DTU-based](https://docs.microsoft.com/azure/sql-database/sql-database-dtu-resource-limits-elastic-pools).
         */
        tier: pulumi.Input<string>;
    }
    interface FailoverGroupPartnerServer {
        /**
         * The ID of a partner SQL server to include in the failover group.
         */
        id: pulumi.Input<string>;
        /**
         * The location of the partner server.
         */
        location?: pulumi.Input<string>;
        /**
         * The replication role of the partner server. Possible values include `Primary` or `Secondary`.
         */
        role?: pulumi.Input<string>;
    }
    interface FailoverGroupReadWriteEndpointFailoverPolicy {
        /**
         * The grace period in minutes, before failover with data loss is attempted for the read-write endpoint. Required when `mode` is `Automatic`.
         */
        graceMinutes?: pulumi.Input<number>;
        /**
         * The failover policy of the read-write endpoint for the failover group. Possible values are `Automatic` or `Manual`.
         */
        mode: pulumi.Input<string>;
    }
    interface JobAgentIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to assign to this Elastic Job Agent.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Elastic Job Agent. Currently only `UserAssigned` is supported.
         */
        type: pulumi.Input<string>;
    }
    interface JobStepOutputTarget {
        /**
         * The ID of the Elastic Job Credential to use when connecting to the output destination.
         */
        jobCredentialId?: pulumi.Input<string>;
        /**
         * The ID of the output database.
         */
        mssqlDatabaseId: pulumi.Input<string>;
        /**
         * The name of the output schema. Defaults to `dbo`.
         */
        schemaName?: pulumi.Input<string>;
        /**
         * The name of the output table.
         */
        tableName: pulumi.Input<string>;
    }
    interface JobTargetGroupJobTarget {
        /**
         * The name of the MS SQL Database.
         *
         * > **Note:** This cannot be set in combination with `elasticPoolName`.
         */
        databaseName?: pulumi.Input<string>;
        /**
         * The name of the MS SQL Elastic Pool.
         *
         * > **Note:** This cannot be set in combination with `databaseName`.
         */
        elasticPoolName?: pulumi.Input<string>;
        /**
         * The ID of the job credential to use during execution of jobs.
         *
         * > **Note:** This is required when `membershipType` is `Include`, unless `databaseName` is set or the target resource is configured to use a managed identity for authentication.
         */
        jobCredentialId?: pulumi.Input<string>;
        /**
         * The membership type for this job target. Possible values are `Include` and `Exclude`. Defaults to `Include`.
         */
        membershipType?: pulumi.Input<string>;
        /**
         * The name of the MS SQL Server.
         */
        serverName: pulumi.Input<string>;
        /**
         * The job target type. This value is computed based on `serverName`, `databaseName`, and `elasticPoolName`.
         */
        type?: pulumi.Input<string>;
    }
    interface ManagedDatabaseLongTermRetentionPolicy {
        /**
         * Specifies if the backups are immutable. Defaults to `false`.
         */
        immutableBackupsEnabled?: pulumi.Input<boolean>;
        /**
         * The monthly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 120 months. e.g. `P1Y`, `P1M`, `P4W` or `P30D`. Defaults to `PT0S`.
         */
        monthlyRetention?: pulumi.Input<string>;
        /**
         * The week of year to take the yearly backup. Value has to be between `1` and `52`.
         */
        weekOfYear?: pulumi.Input<number>;
        /**
         * The weekly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 520 weeks. e.g. `P1Y`, `P1M`, `P1W` or `P7D`. Defaults to `PT0S`.
         */
        weeklyRetention?: pulumi.Input<string>;
        /**
         * The yearly retention policy for an LTR backup in an ISO 8601 format. Valid value is between 1 to 10 years. e.g. `P1Y`, `P12M`, `P52W` or `P365D`. Defaults to `PT0S`.
         */
        yearlyRetention?: pulumi.Input<string>;
    }
    interface ManagedDatabasePointInTimeRestore {
        /**
         * The point in time for the restore from `sourceDatabaseId`. Changing this forces a new resource to be created.
         */
        restorePointInTime: pulumi.Input<string>;
        /**
         * The source database id that will be used to restore from. Changing this forces a new resource to be created.
         */
        sourceDatabaseId: pulumi.Input<string>;
    }
    interface ManagedInstanceAzureActiveDirectoryAdministrator {
        /**
         * Specifies whether only Azure AD authentication can be used to log in to this SQL Managed Instance. When `true`, the `administratorLogin` and `administratorLoginPassword` properties can be omitted. Defaults to `false`.
         */
        azureadAuthenticationOnlyEnabled?: pulumi.Input<boolean>;
        /**
         * The login username of the Azure AD Administrator of this SQL Managed Instance.
         */
        loginUsername: pulumi.Input<string>;
        /**
         * The object id of the Azure AD Administrator of this SQL Managed Instance.
         */
        objectId: pulumi.Input<string>;
        /**
         * The principal type of the Azure AD Administrator of this SQL Managed Instance. Possible values are `Application`, `Group`, `User`.
         */
        principalType: pulumi.Input<string>;
        /**
         * The tenant id of the Azure AD Administrator of this SQL Managed Instance. Should be specified if the Azure AD Administrator is homed in a different tenant to the SQL Managed Instance.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ManagedInstanceFailoverGroupPartnerRegion {
        /**
         * The Azure Region where the Managed Instance Failover Group should exist. Changing this forces a new resource to be created.
         */
        location?: pulumi.Input<string>;
        /**
         * The partner replication role of the Managed Instance Failover Group.
         */
        role?: pulumi.Input<string>;
    }
    interface ManagedInstanceFailoverGroupReadWriteEndpointFailoverPolicy {
        /**
         * Applies only if `mode` is `Automatic`. The grace period in minutes before failover with data loss is attempted.
         */
        graceMinutes?: pulumi.Input<number>;
        /**
         * The failover mode. Possible values are `Automatic` or `Manual`.
         */
        mode: pulumi.Input<string>;
    }
    interface ManagedInstanceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this SQL Managed Instance. Required when `type` includes `UserAssigned`.
         *
         * > **Note:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned` and SQL Managed Instance has been created.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this SQL Managed Instance.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this SQL Managed Instance.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this SQL Managed Instance. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ManagedInstanceStartStopScheduleSchedule {
        /**
         * Start day of the schedule. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, `Sunday`.
         */
        startDay: pulumi.Input<string>;
        /**
         * Start time of the schedule in 24-hour format (e.g., `08:00`).
         */
        startTime: pulumi.Input<string>;
        /**
         * Stop day of the schedule. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday`, `Sunday`.
         */
        stopDay: pulumi.Input<string>;
        /**
         * Stop time of the schedule in 24-hour format (e.g., `17:00`).
         */
        stopTime: pulumi.Input<string>;
    }
    interface ManagedInstanceVulnerabilityAssessmentRecurringScans {
        /**
         * Boolean flag which specifies if the schedule scan notification will be sent to the subscription administrators. Defaults to `true`.
         */
        emailSubscriptionAdmins?: pulumi.Input<boolean>;
        /**
         * Specifies an array of e-mail addresses to which the scan notification is sent.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Boolean flag which specifies if recurring scans is enabled or disabled. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
    }
    interface ServerAzureadAdministrator {
        /**
         * Specifies whether only AD Users and administrators (e.g. `azuread_administrator[0].login_username`) can be used to login, or also local database users (e.g. `administratorLogin`). When `true`, the `administratorLogin` and `administratorLoginPassword` properties can be omitted.
         */
        azureadAuthenticationOnly?: pulumi.Input<boolean>;
        /**
         * The login username of the Azure AD Administrator of this SQL Server.
         */
        loginUsername: pulumi.Input<string>;
        /**
         * The object id of the Azure AD Administrator of this SQL Server.
         */
        objectId: pulumi.Input<string>;
        /**
         * The tenant id of the Azure AD Administrator of this SQL Server.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface ServerIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this SQL Server.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         *
         * > **Note:** When `type` is set to `SystemAssigned`, the assigned `principalId` and `tenantId` can be retrieved after the Microsoft SQL Server has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this SQL Server.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this SQL Server.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this SQL Server. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface ServerVulnerabilityAssessmentRecurringScans {
        /**
         * Boolean flag which specifies if the schedule scan notification will be sent to the subscription administrators. Defaults to `false`.
         */
        emailSubscriptionAdmins?: pulumi.Input<boolean>;
        /**
         * Specifies an array of email addresses to which the scan notification is sent.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Boolean flag which specifies if recurring scans is enabled or disabled. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
    }
    interface VirtualMachineAssessment {
        /**
         * Should Assessment be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Should Assessment be run immediately? Defaults to `false`.
         */
        runImmediately?: pulumi.Input<boolean>;
        /**
         * An `schedule` block as defined below.
         */
        schedule?: pulumi.Input<inputs.mssql.VirtualMachineAssessmentSchedule>;
    }
    interface VirtualMachineAssessmentSchedule {
        /**
         * What day of the week the assessment will be run. Possible values are `Friday`, `Monday`, `Saturday`, `Sunday`, `Thursday`, `Tuesday` and `Wednesday`.
         */
        dayOfWeek: pulumi.Input<string>;
        /**
         * How many months between assessment runs. Valid values are between `1` and `5`.
         *
         * > **Note:** Either one of `weeklyInterval` or `monthlyOccurrence` must be specified.
         */
        monthlyOccurrence?: pulumi.Input<number>;
        /**
         * What time the assessment will be run. Must be in the format `HH:mm`.
         */
        startTime: pulumi.Input<string>;
        /**
         * How many weeks between assessment runs. Valid values are between `1` and `6`.
         */
        weeklyInterval?: pulumi.Input<number>;
    }
    interface VirtualMachineAutoBackup {
        /**
         * @deprecated `encryptionEnabled` has been deprecated and will be removed in v5.0 of the AzureRM Provider. Encryption is enabled when `encryptionPassword` is set; otherwise disabled.
         */
        encryptionEnabled?: pulumi.Input<boolean>;
        /**
         * Encryption password to use. Setting a password will enable encryption.
         */
        encryptionPassword?: pulumi.Input<string>;
        /**
         * A `manualSchedule` block as documented below. When this block is present, the schedule type is set to `Manual`. Without this block, the schedule type is set to `Automated`.
         */
        manualSchedule?: pulumi.Input<inputs.mssql.VirtualMachineAutoBackupManualSchedule>;
        /**
         * Retention period of backups, in days. Valid values are from `1` to `30`.
         */
        retentionPeriodInDays: pulumi.Input<number>;
        /**
         * Access key for the storage account where backups will be kept.
         */
        storageAccountAccessKey: pulumi.Input<string>;
        /**
         * Blob endpoint for the storage account where backups will be kept.
         */
        storageBlobEndpoint: pulumi.Input<string>;
        /**
         * Include or exclude system databases from auto backup.
         */
        systemDatabasesBackupEnabled?: pulumi.Input<boolean>;
    }
    interface VirtualMachineAutoBackupManualSchedule {
        /**
         * A list of days on which backup can take place. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`
         *
         * > **Note:** `daysOfWeek` can only be specified when `manualSchedule` is set to `Weekly`
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Frequency of full backups. Valid values include `Daily` or `Weekly`.
         */
        fullBackupFrequency: pulumi.Input<string>;
        /**
         * Start hour of a given day during which full backups can take place. Valid values are from `0` to `23`.
         */
        fullBackupStartHour: pulumi.Input<number>;
        /**
         * Duration of the time window of a given day during which full backups can take place, in hours. Valid values are between `1` and `23`.
         */
        fullBackupWindowInHours: pulumi.Input<number>;
        /**
         * Frequency of log backups, in minutes. Valid values are from `5` to `60`.
         */
        logBackupFrequencyInMinutes: pulumi.Input<number>;
    }
    interface VirtualMachineAutoPatching {
        /**
         * The day of week to apply the patch on. Possible values are `Monday`, `Tuesday`, `Wednesday`, `Thursday`, `Friday`, `Saturday` and `Sunday`.
         */
        dayOfWeek: pulumi.Input<string>;
        /**
         * The size of the Maintenance Window in minutes.
         */
        maintenanceWindowDurationInMinutes: pulumi.Input<number>;
        /**
         * The Hour, in the Virtual Machine Time-Zone when the patching maintenance window should begin.
         */
        maintenanceWindowStartingHour: pulumi.Input<number>;
    }
    interface VirtualMachineAvailabilityGroupListenerLoadBalancerConfiguration {
        /**
         * The ID of the Load Balancer. Changing this forces a new resource to be created.
         */
        loadBalancerId: pulumi.Input<string>;
        /**
         * The private IP Address of the listener. Changing this forces a new resource to be created.
         */
        privateIpAddress: pulumi.Input<string>;
        /**
         * The probe port of the listener. Changing this forces a new resource to be created.
         */
        probePort: pulumi.Input<number>;
        /**
         * Specifies a list of SQL Virtual Machine IDs. Changing this forces a new resource to be created.
         */
        sqlVirtualMachineIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Subnet to create the listener. Changing this forces a new resource to be created.
         *
         * > **Note:** `sqlVirtualMachineIds` should match with the SQL Virtual Machines specified in `replica`.
         */
        subnetId: pulumi.Input<string>;
    }
    interface VirtualMachineAvailabilityGroupListenerMultiSubnetIpConfiguration {
        /**
         * The private IP Address of the listener. Changing this forces a new resource to be created.
         */
        privateIpAddress: pulumi.Input<string>;
        /**
         * The ID of the Sql Virtual Machine. Changing this forces a new resource to be created.
         */
        sqlVirtualMachineId: pulumi.Input<string>;
        /**
         * The ID of the Subnet to create the listener. Changing this forces a new resource to be created.
         *
         * > **Note:** `sqlVirtualMachineId` should match with the SQL Virtual Machines specified in `replica`.
         */
        subnetId: pulumi.Input<string>;
    }
    interface VirtualMachineAvailabilityGroupListenerReplica {
        /**
         * The replica commit mode for the availability group. Possible values are `Synchronous_Commit` and `Asynchronous_Commit`. Changing this forces a new resource to be created.
         */
        commit: pulumi.Input<string>;
        /**
         * The replica failover mode for the availability group. Possible values are `Manual` and `Automatic`. Changing this forces a new resource to be created.
         */
        failoverMode: pulumi.Input<string>;
        /**
         * The replica readable secondary mode for the availability group. Possible values are `No`, `Read_Only` and `All`. Changing this forces a new resource to be created.
         */
        readableSecondary: pulumi.Input<string>;
        /**
         * The replica role for the availability group. Possible values are `Primary` and `Secondary`. Changing this forces a new resource to be created.
         */
        role: pulumi.Input<string>;
        /**
         * The ID of the SQL Virtual Machine. Changing this forces a new resource to be created.
         */
        sqlVirtualMachineId: pulumi.Input<string>;
    }
    interface VirtualMachineGroupWsfcDomainProfile {
        /**
         * The account name used for creating cluster. Changing this forces a new resource to be created.
         */
        clusterBootstrapAccountName?: pulumi.Input<string>;
        /**
         * The account name used for operating cluster. Changing this forces a new resource to be created.
         */
        clusterOperatorAccountName?: pulumi.Input<string>;
        /**
         * The subnet type of the SQL Virtual Machine cluster. Possible values are `MultiSubnet` and `SingleSubnet`. Changing this forces a new resource to be created.
         */
        clusterSubnetType: pulumi.Input<string>;
        /**
         * The fully qualified name of the domain. Changing this forces a new resource to be created.
         */
        fqdn: pulumi.Input<string>;
        /**
         * The organizational Unit path in which the nodes and cluster will be present. Changing this forces a new resource to be created.
         */
        organizationalUnitPath?: pulumi.Input<string>;
        /**
         * The account name under which SQL service will run on all participating SQL virtual machines in the cluster. Changing this forces a new resource to be created.
         */
        sqlServiceAccountName?: pulumi.Input<string>;
        /**
         * The primary key of the Storage Account.
         */
        storageAccountPrimaryKey?: pulumi.Input<string>;
        /**
         * The SAS URL to the Storage Container of the witness storage account. Changing this forces a new resource to be created.
         */
        storageAccountUrl?: pulumi.Input<string>;
    }
    interface VirtualMachineKeyVaultCredential {
        /**
         * The Azure Key Vault url. Changing this forces a new resource to be created.
         */
        keyVaultUrl: pulumi.Input<string>;
        /**
         * The credential name.
         */
        name: pulumi.Input<string>;
        /**
         * The service principal name to access key vault. Changing this forces a new resource to be created.
         */
        servicePrincipalName: pulumi.Input<string>;
        /**
         * The service principal name secret to access key vault. Changing this forces a new resource to be created.
         */
        servicePrincipalSecret: pulumi.Input<string>;
    }
    interface VirtualMachineSqlInstance {
        /**
         * Specifies if the SQL Server is optimized for adhoc workloads. Possible values are `true` and `false`. Defaults to `false`.
         */
        adhocWorkloadsOptimizationEnabled?: pulumi.Input<boolean>;
        /**
         * Collation of the SQL Server. Defaults to `SQL_Latin1_General_CP1_CI_AS`. Changing this forces a new resource to be created.
         */
        collation?: pulumi.Input<string>;
        /**
         * Specifies if Instant File Initialization is enabled for the SQL Server. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        instantFileInitializationEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies if Lock Pages in Memory is enabled for the SQL Server. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new resource to be created.
         */
        lockPagesInMemoryEnabled?: pulumi.Input<boolean>;
        /**
         * Maximum Degree of Parallelism of the SQL Server. Possible values are between `0` and `32767`. Defaults to `0`.
         */
        maxDop?: pulumi.Input<number>;
        /**
         * Maximum amount memory that SQL Server Memory Manager can allocate to the SQL Server process. Possible values are between `128` and `2147483647` Defaults to `2147483647`.
         */
        maxServerMemoryMb?: pulumi.Input<number>;
        /**
         * Minimum amount memory that SQL Server Memory Manager can allocate to the SQL Server process. Possible values are between `0` and `2147483647` Defaults to `0`.
         *
         * > **Note:** `maxServerMemoryMb` must be greater than or equal to `minServerMemoryMb`
         */
        minServerMemoryMb?: pulumi.Input<number>;
    }
    interface VirtualMachineStorageConfiguration {
        /**
         * A `storageSettings` block as defined below.
         */
        dataSettings?: pulumi.Input<inputs.mssql.VirtualMachineStorageConfigurationDataSettings>;
        /**
         * The type of disk configuration to apply to the SQL Server. Valid values include `NEW`, `EXTEND`, or `ADD`.
         */
        diskType: pulumi.Input<string>;
        /**
         * A `storageSettings` block as defined below.
         */
        logSettings?: pulumi.Input<inputs.mssql.VirtualMachineStorageConfigurationLogSettings>;
        /**
         * The type of storage workload. Valid values include `GENERAL`, `OLTP`, or `DW`.
         */
        storageWorkloadType: pulumi.Input<string>;
        /**
         * Specifies whether to set system databases (except tempDb) location to newly created data storage. Possible values are `true` and `false`. Defaults to `false`.
         */
        systemDbOnDataDiskEnabled?: pulumi.Input<boolean>;
        /**
         * An `tempDbSettings` block as defined below.
         */
        tempDbSettings?: pulumi.Input<inputs.mssql.VirtualMachineStorageConfigurationTempDbSettings>;
    }
    interface VirtualMachineStorageConfigurationDataSettings {
        defaultFilePath: pulumi.Input<string>;
        luns: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface VirtualMachineStorageConfigurationLogSettings {
        defaultFilePath: pulumi.Input<string>;
        luns: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface VirtualMachineStorageConfigurationTempDbSettings {
        /**
         * The SQL Server default file count. This value defaults to `8`
         */
        dataFileCount?: pulumi.Input<number>;
        /**
         * The SQL Server default file size - This value defaults to `512`
         */
        dataFileGrowthInMb?: pulumi.Input<number>;
        /**
         * The SQL Server default file size - This value defaults to `256`
         */
        dataFileSizeMb?: pulumi.Input<number>;
        /**
         * The SQL Server default path
         */
        defaultFilePath: pulumi.Input<string>;
        /**
         * The SQL Server default file size - This value defaults to `512`
         */
        logFileGrowthMb?: pulumi.Input<number>;
        /**
         * The SQL Server default file size - This value defaults to `256`
         */
        logFileSizeMb?: pulumi.Input<number>;
        /**
         * A list of Logical Unit Numbers for the disks.
         */
        luns: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface VirtualMachineWsfcDomainCredential {
        /**
         * The account password used for creating cluster.
         */
        clusterBootstrapAccountPassword: pulumi.Input<string>;
        /**
         * The account password used for operating cluster.
         */
        clusterOperatorAccountPassword: pulumi.Input<string>;
        /**
         * The account password under which SQL service will run on all participating SQL virtual machines in the cluster.
         */
        sqlServiceAccountPassword: pulumi.Input<string>;
    }
}
export declare namespace mysql {
    interface FlexibleServerCustomerManagedKey {
        /**
         * The ID of the geo backup Key Vault Key. It can't cross region and need Customer Managed Key in same region as geo backup.
         */
        geoBackupKeyVaultKeyId?: pulumi.Input<string>;
        /**
         * The geo backup user managed identity id for a Customer Managed Key. Should be added with `identityIds`. It can't cross region and need identity in same region as geo backup.
         *
         * > **Note:** `primaryUserAssignedIdentityId` or `geoBackupUserAssignedIdentityId` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        geoBackupUserAssignedIdentityId?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * The ID of the Managed HSM Key.
         */
        managedHsmKeyId?: pulumi.Input<string>;
        /**
         * Specifies the primary user managed identity id for a Customer Managed Key. Should be added with `identityIds`.
         */
        primaryUserAssignedIdentityId?: pulumi.Input<string>;
    }
    interface FlexibleServerHighAvailability {
        /**
         * The high availability mode for the MySQL Flexible Server. Possibles values are `SameZone` and `ZoneRedundant`.
         *
         * > **Note:** `storage[0].auto_grow_enabled` must be enabled when `highAvailability` is enabled. To change the `highAvailability` for a MySQL Flexible Server created with `highAvailability` disabled during creation, the resource has to be recreated.
         */
        mode: pulumi.Input<string>;
        /**
         * Specifies the Availability Zone in which the standby Flexible Server should be located. Possible values are `1`, `2` and `3`.
         *
         * > **Note:** Azure will automatically assign an Availability Zone if one is not specified. If the MySQL Flexible Server fails-over to the Standby Availability Zone, the `zone` will be updated to reflect the current Primary Availability Zone. You can use Terraform's `ignoreChanges` functionality to ignore changes to the `zone` and `high_availability[0].standby_availability_zone` fields should you wish for Terraform to not migrate the MySQL Flexible Server back to it's primary Availability Zone after a fail-over.
         *
         * > **Note:** The Availability Zones available depend on the Azure Region that the MySQL Flexible Server is being deployed into - see [the Azure Availability Zones documentation](https://azure.microsoft.com/global-infrastructure/geographies/#geographies) for more information on which Availability Zones are available in each Azure Region.
         */
        standbyAvailabilityZone?: pulumi.Input<string>;
    }
    interface FlexibleServerIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this MySQL Flexible Server.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this MySQL Flexible Server. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface FlexibleServerMaintenanceWindow {
        /**
         * The day of week for maintenance window. Defaults to `0`.
         */
        dayOfWeek?: pulumi.Input<number>;
        /**
         * The start hour for maintenance window. Defaults to `0`.
         */
        startHour?: pulumi.Input<number>;
        /**
         * The start minute for maintenance window. Defaults to `0`.
         */
        startMinute?: pulumi.Input<number>;
    }
    interface FlexibleServerStorage {
        /**
         * Should Storage Auto Grow be enabled? Defaults to `true`.
         */
        autoGrowEnabled?: pulumi.Input<boolean>;
        /**
         * Should IOPS be scaled automatically? If `true`, `iops` can not be set. Defaults to `false`.
         */
        ioScalingEnabled?: pulumi.Input<boolean>;
        /**
         * The storage IOPS for the MySQL Flexible Server. Possible values are between `360` and `20000`.
         */
        iops?: pulumi.Input<number>;
        /**
         * Should Storage Log On Disk be enabled? Defaults to `false`.
         */
        logOnDiskEnabled?: pulumi.Input<boolean>;
        /**
         * The max storage allowed for the MySQL Flexible Server. Possible values are between `20` and `16384`.
         *
         * > **Note:** Decreasing `sizeGb` forces a new resource to be created.
         */
        sizeGb?: pulumi.Input<number>;
    }
}
export declare namespace netapp {
    interface AccountActiveDirectory {
        /**
         * If enabled, AES encryption will be enabled for SMB communication. Defaults to `false`.
         */
        aesEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * A list of DNS server IP addresses for the Active Directory domain. Only allows `IPv4` address.
         */
        dnsServers: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Active Directory domain.
         */
        domain: pulumi.Input<string>;
        /**
         * Name of the active directory machine.
         */
        kerberosAdName?: pulumi.Input<string>;
        /**
         * kdc server IP addresses for the active directory machine.
         *
         * > **Note:** If you plan on using **Kerberos** volumes, both `adName` and `kdcIp` are required in order to create the volume.
         */
        kerberosKdcIp?: pulumi.Input<string>;
        /**
         * Specifies whether or not the LDAP traffic needs to be secured via TLS. Defaults to `false`.
         */
        ldapOverTlsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies whether or not the LDAP traffic needs to be signed. Defaults to `false`.
         */
        ldapSigningEnabled?: pulumi.Input<boolean>;
        /**
         * If enabled, NFS client local users can also (in addition to LDAP users) access the NFS volumes. Defaults to `false`.
         */
        localNfsUsersWithLdapAllowed?: pulumi.Input<boolean>;
        /**
         * The Organizational Unit (OU) within Active Directory where machines will be created. If blank, defaults to `CN=Computers`.
         */
        organizationalUnit?: pulumi.Input<string>;
        /**
         * The password associated with the `username`.
         */
        password: pulumi.Input<string>;
        /**
         * When LDAP over SSL/TLS is enabled, the LDAP client is required to have a *base64 encoded Active Directory Certificate Service's self-signed root CA certificate*, this optional parameter is used only for dual protocol with LDAP user-mapping volumes. Required if `ldapOverTlsEnabled` is set to `true`.
         */
        serverRootCaCertificate?: pulumi.Input<string>;
        /**
         * The Active Directory site the service will limit Domain Controller discovery to. If blank, defaults to `Default-First-Site-Name`.
         */
        siteName?: pulumi.Input<string>;
        /**
         * The NetBIOS name which should be used for the NetApp SMB Server, which will be registered as a computer account in the AD and used to mount volumes.
         */
        smbServerName: pulumi.Input<string>;
        /**
         * The Username of Active Directory Domain Administrator.
         */
        username: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * The identity id of the user assigned identity to use when type is `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The identity type, which can be `SystemAssigned` or `UserAssigned`. Only one type at a time is supported by Azure NetApp Files.
         */
        type: pulumi.Input<string>;
    }
    interface GetAccountIdentity {
        identityIds?: string[];
        principalId?: string;
        tenantId?: string;
        type: string;
    }
    interface GetAccountIdentityArgs {
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        type: pulumi.Input<string>;
    }
    interface SnapshotPolicyDailySchedule {
        /**
         * Hour of the day that the snapshots will be created, valid range is from 0 to 23.
         */
        hour: pulumi.Input<number>;
        /**
         * Minute of the hour that the snapshots will be created, valid range is from 0 to 59.
         */
        minute: pulumi.Input<number>;
        /**
         * How many hourly snapshots to keep, valid range is from 0 to 255.
         */
        snapshotsToKeep: pulumi.Input<number>;
    }
    interface SnapshotPolicyHourlySchedule {
        /**
         * Minute of the hour that the snapshots will be created, valid range is from 0 to 59.
         */
        minute: pulumi.Input<number>;
        /**
         * How many hourly snapshots to keep, valid range is from 0 to 255.
         */
        snapshotsToKeep: pulumi.Input<number>;
    }
    interface SnapshotPolicyMonthlySchedule {
        /**
         * List of the days of the month when the snapshots will be created, valid range is from 1 to 30.
         */
        daysOfMonths: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Hour of the day that the snapshots will be created, valid range is from 0 to 23.
         */
        hour: pulumi.Input<number>;
        /**
         * Minute of the hour that the snapshots will be created, valid range is from 0 to 59.
         */
        minute: pulumi.Input<number>;
        /**
         * How many hourly snapshots to keep, valid range is from 0 to 255.
         */
        snapshotsToKeep: pulumi.Input<number>;
    }
    interface SnapshotPolicyWeeklySchedule {
        /**
         * List of the week days using English names when the snapshots will be created.
         */
        daysOfWeeks: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Hour of the day that the snapshots will be created, valid range is from 0 to 23.
         */
        hour: pulumi.Input<number>;
        /**
         * Minute of the hour that the snapshots will be created, valid range is from 0 to 59.
         */
        minute: pulumi.Input<number>;
        /**
         * How many hourly snapshots to keep, valid range is from 0 to 255.
         */
        snapshotsToKeep: pulumi.Input<number>;
    }
    interface VolumeCoolAccess {
        /**
         * The coolness period in days for the volume. Possible vales are between `2` and `183`.
         */
        coolnessPeriodInDays: pulumi.Input<number>;
        /**
         * The cool access retrieval policy for the volume. Possible values are `Default`, `Never` and `OnRead`.
         */
        retrievalPolicy: pulumi.Input<string>;
        /**
         * The cool access tiering policy for the volume. Possible values are `Auto` and `SnapshotOnly`.
         */
        tieringPolicy: pulumi.Input<string>;
    }
    interface VolumeDataProtectionAdvancedRansomware {
        /**
         * Enable or disable the Advanced Ransomware Protection feature.
         *
         * > **Note:** Advanced Ransomware Protection is currently in preview and requires feature registration. For performance considerations and supported regions, please refer to the [Azure documentation](https://learn.microsoft.com/en-us/azure/azure-netapp-files/ransomware-configure).
         *
         * > **Note:** It is recommended to enable no more than five volumes per Azure region with ARP to mitigate performance issues, and to increase QoS capacity by 5 to 10 percent due to potential performance impacts.
         */
        protectionEnabled: pulumi.Input<boolean>;
    }
    interface VolumeDataProtectionBackupPolicy {
        /**
         * Resource ID of the backup policy to apply to the volume.
         */
        backupPolicyId: pulumi.Input<string>;
        /**
         * Resource ID of the backup backup vault to associate this volume to.
         */
        backupVaultId: pulumi.Input<string>;
        /**
         * Enables the backup policy on the volume, defaults to `true`.
         *
         * For more information on Azure NetApp Files Backup feature please see [Understand Azure NetApp Files backup](https://learn.microsoft.com/en-us/azure/azure-netapp-files/backup-introduction)
         */
        policyEnabled?: pulumi.Input<boolean>;
    }
    interface VolumeDataProtectionReplication {
        /**
         * The endpoint type, default value is `dst` for destination.
         */
        endpointType?: pulumi.Input<string>;
        /**
         * Location of the primary volume. Changing this forces a new resource to be created.
         */
        remoteVolumeLocation: pulumi.Input<string>;
        /**
         * Resource ID of the primary volume.
         */
        remoteVolumeResourceId: pulumi.Input<string>;
        /**
         * Replication frequency, supported values are '10minutes', 'hourly', 'daily', values are case sensitive.
         *
         * A full example of the `dataProtectionReplication` attribute can be found in the `./examples/netapp/volume_crr` directory within the GitHub Repository
         *
         * > **Note:** Each destination volume can have only one `dataProtectionReplication` block configured. However, a source volume can have up to 2 destination volumes replicating from it (fan-out deployment). For more information on fan-out replication topologies, see [Understand data protection in Azure NetApp Files](https://learn.microsoft.com/azure/azure-netapp-files/data-protection-disaster-recovery-options#supported-replication-topologies).
         *
         * > **Note:** For cross-zone replication (when `remoteVolumeLocation` is the same as the volume's `location`), both the source and destination volumes must have a `zone` assigned. For a complete example of cross-zone-region replication with fan-out deployment, see the `./examples/netapp/cross_zone_region_replication` directory within the GitHub Repository. For more information, see [Manage cross-zone-region replication for Azure NetApp Files](https://learn.microsoft.com/azure/azure-netapp-files/cross-zone-region-replication-configure).
         */
        replicationFrequency: pulumi.Input<string>;
    }
    interface VolumeDataProtectionSnapshotPolicy {
        /**
         * Resource ID of the snapshot policy to apply to the volume.
         *
         * A full example of the `dataProtectionSnapshotPolicy` attribute usage can be found in the `./examples/netapp/nfsv3_volume_with_snapshot_policy` directory within the GitHub Repository
         *
         * > **Note:** `dataProtectionSnapshotPolicy` block can be used alone or with dataProtectionReplication in the primary volume only, if enabling it in the secondary, an error will be thrown.
         */
        snapshotPolicyId: pulumi.Input<string>;
    }
    interface VolumeExportPolicyRule {
        /**
         * A list of allowed clients IPv4 addresses.
         */
        allowedClients: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is Kerberos 5 read-only access permitted to this volume?
         */
        kerberos5ReadOnlyEnabled?: pulumi.Input<boolean>;
        /**
         * Is Kerberos 5 read/write permitted to this volume?
         */
        kerberos5ReadWriteEnabled?: pulumi.Input<boolean>;
        /**
         * Is Kerberos 5i read-only permitted to this volume?
         */
        kerberos5iReadOnlyEnabled?: pulumi.Input<boolean>;
        /**
         * Is Kerberos 5i read/write permitted to this volume?
         */
        kerberos5iReadWriteEnabled?: pulumi.Input<boolean>;
        /**
         * Is Kerberos 5p read-only permitted to this volume?
         */
        kerberos5pReadOnlyEnabled?: pulumi.Input<boolean>;
        /**
         * Is Kerberos 5p read/write permitted to this volume?
         */
        kerberos5pReadWriteEnabled?: pulumi.Input<boolean>;
        /**
         * A list of allowed protocols. Valid values include `CIFS`, `NFSv3`, or `NFSv4.1`. Only a single element is supported at this time. This replaces the previous arguments: `cifsEnabled`, `nfsv3Enabled` and `nfsv4Enabled`.
         */
        protocol?: pulumi.Input<string>;
        /**
         * @deprecated this property has been deprecated in favour of `export_policy_rule.protocol` and will be removed in version 5.0 of the Provider.
         */
        protocolsEnabled?: pulumi.Input<string>;
        /**
         * Is root access permitted to this volume?
         */
        rootAccessEnabled?: pulumi.Input<boolean>;
        /**
         * The index number of the rule.
         */
        ruleIndex: pulumi.Input<number>;
        /**
         * Is the file system on unix read only?
         */
        unixReadOnly?: pulumi.Input<boolean>;
        /**
         * Is the file system on unix read and write?
         */
        unixReadWrite?: pulumi.Input<boolean>;
    }
    interface VolumeGroupOracleVolume {
        /**
         * The ID of the Capacity Pool. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        capacityPoolId: pulumi.Input<string>;
        /**
         * A `dataProtectionReplication` block as defined below. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        dataProtectionReplication?: pulumi.Input<inputs.netapp.VolumeGroupOracleVolumeDataProtectionReplication>;
        /**
         * A `dataProtectionSnapshotPolicy` block as defined below.
         */
        dataProtectionSnapshotPolicy?: pulumi.Input<inputs.netapp.VolumeGroupOracleVolumeDataProtectionSnapshotPolicy>;
        /**
         * The encryption key source, it can be `Microsoft.NetApp` for platform managed keys or `Microsoft.KeyVault` for customer-managed keys. This is required with `keyVaultPrivateEndpointId`. Changing this forces a new resource to be created.
         */
        encryptionKeySource?: pulumi.Input<string>;
        /**
         * One or more `exportPolicyRule` blocks as defined below.
         */
        exportPolicyRules: pulumi.Input<pulumi.Input<inputs.netapp.VolumeGroupOracleVolumeExportPolicyRule>[]>;
        /**
         * The ID of the Application Volume Group.
         */
        id?: pulumi.Input<string>;
        /**
         * The Private Endpoint ID for Key Vault, which is required when using customer-managed keys. This is required with `encryptionKeySource`. Changing this forces a new resource to be created.
         */
        keyVaultPrivateEndpointId?: pulumi.Input<string>;
        mountIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        name: pulumi.Input<string>;
        /**
         * Indicates which network feature to use, Possible values are `Basic`, `Basic_Standard`, `Standard` and `Standard_Basic`. It defaults to `Basic` if not defined. This is a feature in public preview and for more information about it and how to register, please refer to [Configure network features for an Azure NetApp Files volume](https://docs.microsoft.com/en-us/azure/azure-netapp-files/configure-network-features). This is required if enabling customer managed keys encryption scenario.
         */
        networkFeatures?: pulumi.Input<string>;
        /**
         * The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3Enabled = false` and `nfsv41Enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`.
         *
         * > **Note:** When converting protocols between NFSv3 and NFSv4.1, ensure that export policy rules are updated accordingly to avoid configuration drift. Update the `nfsv3Enabled` and `nfsv41Enabled` flags to match the new protocol.
         */
        protocols: pulumi.Input<string>;
        /**
         * The ID of the proximity placement group (PPG). Changing this forces a new Application Volume Group to be created and data will be lost.
         *
         * > **Note:** For Oracle application, it is required to have PPG enabled so Azure NetApp Files can pin the volumes next to your compute resources, please check [Requirements and considerations for application volume group for Oracle](https://learn.microsoft.com/en-us/azure/azure-netapp-files/application-volume-group-oracle-considerations) for details and other requirements. Note that this cannot be used together with `zone`.
         */
        proximityPlacementGroupId?: pulumi.Input<string>;
        /**
         * Volume security style. Possible values are `ntfs` and `unix`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        securityStyle: pulumi.Input<string>;
        /**
         * Volume security style. Possible values are `Premium`, `Standard`, `Ultra` and `Flexible`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        serviceLevel: pulumi.Input<string>;
        /**
         * Specifies whether the .snapshot (NFS clients) path of a volume is visible. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        snapshotDirectoryVisible: pulumi.Input<boolean>;
        /**
         * The maximum Storage Quota allowed for a file system in Gigabytes.
         */
        storageQuotaInGb: pulumi.Input<number>;
        /**
         * The ID of the Subnet the NetApp Volume resides in, which must have the `Microsoft.NetApp/volumes` delegation. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A mapping of tags which should be assigned to the Application Volume Group.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Throughput of this volume in Mibps.
         */
        throughputInMibps: pulumi.Input<number>;
        /**
         * A unique file path for the volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        volumePath: pulumi.Input<string>;
        /**
         * Volume specification name. Possible values are `ora-data1`, `ora-data2`, `ora-data3`, `ora-data4`, `ora-data5`, `ora-data6`, `ora-data7`, `ora-data8`, `ora-log`, `ora-log-mirror`, `ora-binary` and `ora-backup`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        volumeSpecName: pulumi.Input<string>;
        /**
         * Specifies the Availability Zone in which the Volume should be located. Possible values are `1`, `2` and `3`, depending on the Azure region. Changing this forces a new resource to be created. This feature is currently in preview, for more information on how to enable it, please refer to [Manage availability zone volume placement for Azure NetApp Files](https://learn.microsoft.com/en-us/azure/azure-netapp-files/manage-availability-zone-volume-placement). Note that this cannot be used together with `proximityPlacementGroupId`.
         */
        zone?: pulumi.Input<string>;
    }
    interface VolumeGroupOracleVolumeDataProtectionReplication {
        /**
         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        endpointType?: pulumi.Input<string>;
        /**
         * Location of the primary volume.
         */
        remoteVolumeLocation: pulumi.Input<string>;
        /**
         * Resource ID of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        remoteVolumeResourceId: pulumi.Input<string>;
        /**
         * Replication frequency. Possible values are `10minutes`, `daily` and `hourly`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        replicationFrequency: pulumi.Input<string>;
    }
    interface VolumeGroupOracleVolumeDataProtectionSnapshotPolicy {
        /**
         * Resource ID of the snapshot policy to apply to the volume.
         */
        snapshotPolicyId: pulumi.Input<string>;
    }
    interface VolumeGroupOracleVolumeExportPolicyRule {
        /**
         * A comma-sperated list of allowed client IPv4 addresses.
         */
        allowedClients: pulumi.Input<string>;
        /**
         * Enables NFSv3. Please note that this cannot be enabled if volume has NFSv4.1 as its protocol.
         */
        nfsv3Enabled: pulumi.Input<boolean>;
        /**
         * Enables NFSv4.1. Please note that this cannot be enabled if volume has NFSv3 as its protocol.
         */
        nfsv41Enabled: pulumi.Input<boolean>;
        /**
         * Is root access permitted to this volume? Defaults to `true`.
         */
        rootAccessEnabled?: pulumi.Input<boolean>;
        /**
         * The index number of the rule, must start at 1 and maximum 5.
         */
        ruleIndex: pulumi.Input<number>;
        /**
         * Is the file system on unix read only? Defaults to `false.
         */
        unixReadOnly?: pulumi.Input<boolean>;
        /**
         * Is the file system on unix read and write? Defaults to `true`.
         */
        unixReadWrite?: pulumi.Input<boolean>;
    }
    interface VolumeGroupSapHanaVolume {
        /**
         * The ID of the Capacity Pool. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        capacityPoolId: pulumi.Input<string>;
        /**
         * A `dataProtectionReplication` block as defined below. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        dataProtectionReplication?: pulumi.Input<inputs.netapp.VolumeGroupSapHanaVolumeDataProtectionReplication>;
        /**
         * A `dataProtectionSnapshotPolicy` block as defined below.
         */
        dataProtectionSnapshotPolicy?: pulumi.Input<inputs.netapp.VolumeGroupSapHanaVolumeDataProtectionSnapshotPolicy>;
        /**
         * The encryption key source, it can be `Microsoft.NetApp` for platform managed keys or `Microsoft.KeyVault` for customer-managed keys. This is required with `keyVaultPrivateEndpointId`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        encryptionKeySource?: pulumi.Input<string>;
        /**
         * One or more `exportPolicyRule` blocks as defined below.
         */
        exportPolicyRules: pulumi.Input<pulumi.Input<inputs.netapp.VolumeGroupSapHanaVolumeExportPolicyRule>[]>;
        /**
         * The ID of the Application Volume Group.
         */
        id?: pulumi.Input<string>;
        /**
         * The Private Endpoint ID for Key Vault, which is required when using customer-managed keys. This is required with `encryptionKeySource`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        keyVaultPrivateEndpointId?: pulumi.Input<string>;
        mountIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        name: pulumi.Input<string>;
        /**
         * Network features of the volume. Possible values are `Basic` or `Standard`. Default value is `Basic`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        networkFeatures?: pulumi.Input<string>;
        /**
         * The target volume protocol expressed as a list. Protocol conversion between `NFSv3` and `NFSv4.1` and vice-versa is supported without recreating the volume group, however export policy rules must be updated accordingly to avoid configuration drift (e.g., when converting from `NFSv3` to `NFSv4.1`, set `nfsv3Enabled = false` and `nfsv41Enabled = true` in export policy rules). Supported values include `NFSv3` or `NFSv4.1`, multi-protocol is not supported. Please check [Configure application volume groups for the SAP HANA REST API](https://learn.microsoft.com/en-us/azure/azure-netapp-files/configure-application-volume-group-sap-hana-api) document for details.
         *
         * > **Note:** NFSv3 protocol is only supported for backup volumes (`data-backup`, `log-backup`) in SAP HANA volume groups. Critical volumes (`data`, `log`, `shared`) must use NFSv4.1. When converting protocols on backup volumes, ensure export policy rules are updated accordingly to avoid configuration drift.
         */
        protocols: pulumi.Input<string>;
        /**
         * The ID of the proximity placement group. Changing this forces a new Application Volume Group to be created and data will be lost. For SAP-HANA application, it is required to have PPG enabled so Azure NetApp Files can pin the volumes next to your compute resources, please check [Requirements and considerations for application volume group for SAP HANA](https://learn.microsoft.com/en-us/azure/azure-netapp-files/application-volume-group-considerations) for details and other requirements.
         */
        proximityPlacementGroupId?: pulumi.Input<string>;
        /**
         * Volume security style. Possible values are `ntfs` and `unix`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        securityStyle: pulumi.Input<string>;
        /**
         * Volume security style. Possible values are `Premium`, `Standard`, `Ultra` and `Flexible`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        serviceLevel: pulumi.Input<string>;
        /**
         * Specifies whether the .snapshot (NFS clients) path of a volume is visible. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        snapshotDirectoryVisible: pulumi.Input<boolean>;
        /**
         * The maximum Storage Quota allowed for a file system in Gigabytes.
         */
        storageQuotaInGb: pulumi.Input<number>;
        /**
         * The ID of the Subnet the NetApp Volume resides in, which must have the `Microsoft.NetApp/volumes` delegation. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A mapping of tags which should be assigned to the Application Volume Group.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Throughput of this volume in Mibps.
         */
        throughputInMibps: pulumi.Input<number>;
        /**
         * A unique file path for the volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        volumePath: pulumi.Input<string>;
        /**
         * Volume specification name. Possible values are `data`, `log`, `shared`, `data-backup` and `log-backup`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        volumeSpecName: pulumi.Input<string>;
        /**
         * Specifies the Availability Zone in which the Volume should be located. Possible values are `1`, `2` and `3`. This feature is currently in preview, for more information on how to enable it, please refer to [Manage availability zone volume placement for Azure NetApp Files](https://learn.microsoft.com/en-us/azure/azure-netapp-files/manage-availability-zone-volume-placement). Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        zone?: pulumi.Input<string>;
    }
    interface VolumeGroupSapHanaVolumeDataProtectionReplication {
        /**
         * The endpoint type. Possible values are `dst` and `src`. Defaults to `dst`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        endpointType?: pulumi.Input<string>;
        /**
         * Location of the primary volume.
         */
        remoteVolumeLocation: pulumi.Input<string>;
        /**
         * Resource ID of the primary volume. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        remoteVolumeResourceId: pulumi.Input<string>;
        /**
         * eplication frequency. Possible values are `10minutes`, `daily` and `hourly`. Changing this forces a new Application Volume Group to be created and data will be lost.
         */
        replicationFrequency: pulumi.Input<string>;
    }
    interface VolumeGroupSapHanaVolumeDataProtectionSnapshotPolicy {
        /**
         * Resource ID of the snapshot policy to apply to the volume.
         */
        snapshotPolicyId: pulumi.Input<string>;
    }
    interface VolumeGroupSapHanaVolumeExportPolicyRule {
        /**
         * A comma-sperated list of allowed client IPv4 addresses.
         */
        allowedClients: pulumi.Input<string>;
        /**
         * Enables NFSv3. Please note that this cannot be enabled if volume has NFSv4.1 as its protocol.
         */
        nfsv3Enabled: pulumi.Input<boolean>;
        /**
         * Enables NFSv4.1. Please note that this cannot be enabled if volume has NFSv3 as its protocol.
         */
        nfsv41Enabled: pulumi.Input<boolean>;
        /**
         * Is root access permitted to this volume? Defaults to `true`.
         */
        rootAccessEnabled?: pulumi.Input<boolean>;
        /**
         * The index number of the rule, must start at 1 and maximum 5.
         */
        ruleIndex: pulumi.Input<number>;
        /**
         * Is the file system on unix read only? Defaults to `false.
         */
        unixReadOnly?: pulumi.Input<boolean>;
        /**
         * Is the file system on unix read and write? Defaults to `true`.
         */
        unixReadWrite?: pulumi.Input<boolean>;
    }
}
export declare namespace network {
    interface ApplicationGatewayAuthenticationCertificate {
        /**
         * The contents of the Authentication Certificate which should be used.
         */
        data: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the Authentication Certificate to use.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayAutoscaleConfiguration {
        /**
         * Maximum capacity for autoscaling. Accepted values are in the range `2` to `125`.
         */
        maxCapacity?: pulumi.Input<number>;
        /**
         * Minimum capacity for autoscaling. Accepted values are in the range `0` to `100`.
         */
        minCapacity: pulumi.Input<number>;
    }
    interface ApplicationGatewayBackend {
        /**
         * Whether client IP preservation is enabled for this Backend Settings Collection. Defaults to `false`.
         */
        clientIpPreservationEnabled?: pulumi.Input<boolean>;
        /**
         * Host header to be sent to the backend servers. Can only be set when `protocol` is `Tls`.
         */
        hostName?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Backend Settings Collection.
         */
        name: pulumi.Input<string>;
        /**
         * The port which should be used for this Backend Settings Collection.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the associated Probe.
         */
        probeId?: pulumi.Input<string>;
        /**
         * The name of an associated Probe.
         */
        probeName?: pulumi.Input<string>;
        /**
         * The Protocol which should be used. Possible values are `Tcp` and `Tls`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The connection timeout in seconds. Possible values range between `1` and `86400`. Defaults to `30`.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * A list of `trustedRootCertificate` names.
         */
        trustedRootCertificateNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApplicationGatewayBackendAddressPool {
        /**
         * A list of FQDN's which should be part of the Backend Address Pool.
         */
        fqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * A list of IP Addresses which should be part of the Backend Address Pool.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Backend Address Pool.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayBackendHttpSetting {
        /**
         * The name of the affinity cookie.
         */
        affinityCookieName?: pulumi.Input<string>;
        /**
         * One or more `authenticationCertificateBackend` blocks as defined below.
         */
        authenticationCertificates?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayBackendHttpSettingAuthenticationCertificate>[]>;
        /**
         * A `connectionDraining` block as defined below.
         */
        connectionDraining?: pulumi.Input<inputs.network.ApplicationGatewayBackendHttpSettingConnectionDraining>;
        /**
         * Is Cookie-Based Affinity enabled? Possible values are `Enabled` and `Disabled`.
         */
        cookieBasedAffinity: pulumi.Input<string>;
        /**
         * Whether to use a dedicated backend connection. Defaults to `false`.
         */
        dedicatedBackendConnectionEnabled?: pulumi.Input<boolean>;
        /**
         * Host header to be sent to the backend servers. Cannot be set if `pickHostNameFromBackendAddress` is set to `true`.
         */
        hostName?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Authentication Certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The Path which should be used as a prefix for all HTTP requests.
         */
        path?: pulumi.Input<string>;
        /**
         * Whether host header should be picked from the host name of the backend server. Defaults to `false`.
         */
        pickHostNameFromBackendAddress?: pulumi.Input<boolean>;
        /**
         * The port which should be used for this Backend HTTP Settings Collection.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the associated Probe.
         */
        probeId?: pulumi.Input<string>;
        /**
         * The name of an associated HTTP Probe.
         */
        probeName?: pulumi.Input<string>;
        /**
         * The Protocol which should be used. Possible values are `Http` and `Https`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The request timeout in seconds, which must be between 1 and 86400 seconds. Defaults to `30`.
         */
        requestTimeout?: pulumi.Input<number>;
        /**
         * A list of `trustedRootCertificate` names.
         */
        trustedRootCertificateNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApplicationGatewayBackendHttpSettingAuthenticationCertificate {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the Authentication Certificate to use.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayBackendHttpSettingConnectionDraining {
        /**
         * The number of seconds connection draining is active. Acceptable values are from `1` second to `3600` seconds.
         */
        drainTimeoutSec: pulumi.Input<number>;
        /**
         * If connection draining is enabled or not.
         */
        enabled: pulumi.Input<boolean>;
    }
    interface ApplicationGatewayCustomErrorConfiguration {
        /**
         * Error page URL of the application gateway customer error.
         */
        customErrorPageUrl: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * Status code of the application gateway customer error. Possible values are `HttpStatus400`, `HttpStatus403`, `HttpStatus404`, `HttpStatus405`, `HttpStatus408`, `HttpStatus500`, `HttpStatus502`, `HttpStatus503` and `HttpStatus504`
         */
        statusCode: pulumi.Input<string>;
    }
    interface ApplicationGatewayFrontendIpConfiguration {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Frontend IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The Private IP Address to use for the Application Gateway.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The Allocation Method for the Private IP Address. Possible values are `Dynamic` and `Static`. Defaults to `Dynamic`.
         */
        privateIpAddressAllocation?: pulumi.Input<string>;
        /**
         * The ID of the associated private link configuration.
         */
        privateLinkConfigurationId?: pulumi.Input<string>;
        /**
         * The name of the private link configuration to use for this frontend IP configuration.
         */
        privateLinkConfigurationName?: pulumi.Input<string>;
        /**
         * The ID of a Public IP Address which the Application Gateway should use. The allocation method for the Public IP Address depends on the `sku` of this Application Gateway. Please refer to the [Azure documentation for public IP addresses](https://docs.microsoft.com/azure/virtual-network/public-ip-addresses#application-gateways) for details.
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * The ID of the Subnet.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface ApplicationGatewayFrontendPort {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Frontend Port.
         */
        name: pulumi.Input<string>;
        /**
         * The port used for this Frontend Port.
         */
        port: pulumi.Input<number>;
    }
    interface ApplicationGatewayGatewayIpConfiguration {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of this Gateway IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the Subnet which the Application Gateway should be connected to.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ApplicationGatewayGlobal {
        /**
         * Whether Application Gateway's Request buffer is enabled.
         */
        requestBufferingEnabled: pulumi.Input<boolean>;
        /**
         * Whether Application Gateway's Response buffer is enabled.
         */
        responseBufferingEnabled: pulumi.Input<boolean>;
    }
    interface ApplicationGatewayHttpListener {
        /**
         * One or more `customErrorConfiguration` blocks as defined below.
         */
        customErrorConfigurations?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayHttpListenerCustomErrorConfiguration>[]>;
        /**
         * The ID of the Web Application Firewall Policy which should be used for this HTTP Listener.
         */
        firewallPolicyId?: pulumi.Input<string>;
        /**
         * The ID of the associated Frontend Configuration.
         */
        frontendIpConfigurationId?: pulumi.Input<string>;
        /**
         * The Name of the Frontend IP Configuration used for this HTTP Listener.
         */
        frontendIpConfigurationName: pulumi.Input<string>;
        /**
         * The ID of the associated Frontend Port.
         */
        frontendPortId?: pulumi.Input<string>;
        /**
         * The Name of the Frontend Port use for this HTTP Listener.
         */
        frontendPortName: pulumi.Input<string>;
        /**
         * The Hostname which should be used for this HTTP Listener. Setting this value changes Listener Type to 'Multi site'.
         */
        hostName?: pulumi.Input<string>;
        /**
         * A list of Hostname(s) should be used for this HTTP Listener. It allows special wildcard characters.
         *
         * > **Note:** The `hostNames` and `hostName` are mutually exclusive and cannot both be set.
         */
        hostNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the HTTP Listener.
         */
        name: pulumi.Input<string>;
        /**
         * The Protocol to use for this HTTP Listener. Possible values are `Http` and `Https`.
         */
        protocol: pulumi.Input<string>;
        /**
         * Should Server Name Indication be Required? Defaults to `false`.
         */
        requireSni?: pulumi.Input<boolean>;
        /**
         * The ID of the associated SSL Certificate.
         */
        sslCertificateId?: pulumi.Input<string>;
        /**
         * The name of the associated SSL Certificate which should be used for this HTTP Listener.
         */
        sslCertificateName?: pulumi.Input<string>;
        /**
         * The ID of the associated SSL Profile.
         */
        sslProfileId?: pulumi.Input<string>;
        /**
         * The name of the associated SSL Profile which should be used for this HTTP Listener.
         */
        sslProfileName?: pulumi.Input<string>;
    }
    interface ApplicationGatewayHttpListenerCustomErrorConfiguration {
        /**
         * Error page URL of the application gateway customer error.
         */
        customErrorPageUrl: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * Status code of the application gateway customer error. Possible values are `HttpStatus400`, `HttpStatus403`, `HttpStatus404`, `HttpStatus405`, `HttpStatus408`, `HttpStatus500`, `HttpStatus502`, `HttpStatus503` and `HttpStatus504`
         */
        statusCode: pulumi.Input<string>;
    }
    interface ApplicationGatewayIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Application Gateway.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Application Gateway. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ApplicationGatewayListener {
        /**
         * The ID of the associated Frontend Configuration.
         */
        frontendIpConfigurationId?: pulumi.Input<string>;
        /**
         * The Name of the Frontend IP Configuration used for this Listener.
         */
        frontendIpConfigurationName: pulumi.Input<string>;
        /**
         * The ID of the associated Frontend Port.
         */
        frontendPortId?: pulumi.Input<string>;
        /**
         * The Name of the Frontend Port use for this Listener.
         */
        frontendPortName: pulumi.Input<string>;
        /**
         * A list of Hostname(s) should be used for this Listener. It allows special wildcard characters.
         *
         * > **Note:** `hostNames` cannot be set when `protocol` is set to `Tcp`.
         */
        hostNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the Listener.
         */
        name: pulumi.Input<string>;
        /**
         * The Protocol to use for this Listener. Possible values are `Tcp`, and `Tls`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The ID of the associated SSL Certificate.
         */
        sslCertificateId?: pulumi.Input<string>;
        /**
         * The name of the associated SSL Certificate which should be used for this Listener.
         *
         * > **Note:** `sslCertificateName` must be set when `protocol` is set to `Tls`.
         */
        sslCertificateName?: pulumi.Input<string>;
        /**
         * The ID of the associated SSL Profile.
         */
        sslProfileId?: pulumi.Input<string>;
        /**
         * The name of the associated SSL Profile which should be used for this Listener.
         */
        sslProfileName?: pulumi.Input<string>;
    }
    interface ApplicationGatewayPrivateEndpointConnection {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Application Gateway. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface ApplicationGatewayPrivateLinkConfiguration {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * One or more `ipConfiguration` blocks as defined below.
         *
         * > **Note:** The `AllowApplicationGatewayPrivateLink` feature must be registered on the subscription before enabling private link
         *
         * ```bash
         * az feature register --name AllowApplicationGatewayPrivateLink --namespace Microsoft.Network
         * ```
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayPrivateLinkConfigurationIpConfiguration>[]>;
        /**
         * The name of the private link configuration.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayPrivateLinkConfigurationIpConfiguration {
        /**
         * The name of the IP configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration?
         */
        primary: pulumi.Input<boolean>;
        /**
         * The Static IP Address which should be used.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The allocation method used for the Private IP Address. Possible values are `Dynamic` and `Static`.
         */
        privateIpAddressAllocation: pulumi.Input<string>;
        /**
         * The ID of the subnet the private link configuration should connect to.
         */
        subnetId: pulumi.Input<string>;
    }
    interface ApplicationGatewayProbe {
        /**
         * The hostname used for this Probe. If the Application Gateway is configured for a single site, by default the hostname should be specified as `127.0.0.1`, unless otherwise configured in custom Probe.
         *
         * > **Note:** Exactly one of `host` or `pickHostNameFromBackendHttpSettings` must be set when `protocol` is `Http` or `Https`. Neither can be set when `protocol` is `Tcp` or `Tls`.
         */
        host?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The interval between two consecutive probes in seconds. Possible values range from `1` to `86400`.
         */
        interval: pulumi.Input<number>;
        /**
         * A `match` block as defined above.
         *
         * > **Note:** `match` cannot be set when `protocol` is set to `Tcp` or `Tls`.
         */
        match?: pulumi.Input<inputs.network.ApplicationGatewayProbeMatch>;
        /**
         * The minimum number of servers that are always marked as healthy. Defaults to `0`.
         */
        minimumServers?: pulumi.Input<number>;
        /**
         * The name of the Probe.
         */
        name: pulumi.Input<string>;
        /**
         * The relative URL path of the Probe. Valid value starts with `/`.
         *
         * > **Note:** `path` cannot be set when `protocol` is set to `Tcp` or `Tls`. `path` must be specified when `protocol` is `Http` or `Https`.
         */
        path?: pulumi.Input<string>;
        /**
         * Whether the host header should be picked from the backend HTTP settings. Defaults to `false`.
         *
         * > **Note:** `pickHostNameFromBackendHttpSettings` cannot be set when `protocol` is set to `Tcp` or `Tls`.
         */
        pickHostNameFromBackendHttpSettings?: pulumi.Input<boolean>;
        /**
         * Custom port which will be used for probing the backend servers. Possible values range from `1` to `65535`.
         *
         * > **Note:** In case `port` is not set, the port from the backend settings will be used. This property is valid for `Basic`, `Standard_v2`, and `WAF_v2` SKUs only.
         */
        port?: pulumi.Input<number>;
        /**
         * The protocol used for this Probe. Possible values are `Http`, `Https`, `Tcp`, and `Tls`.
         */
        protocol: pulumi.Input<string>;
        /**
         * Whether the proxy protocol header is enabled for this Probe. Defaults to `false`.
         *
         * > **Note:** `proxyProtocolHeaderEnabled` can only be set when `protocol` is `Tcp` or `Tls`.
         */
        proxyProtocolHeaderEnabled?: pulumi.Input<boolean>;
        /**
         * The timeout in seconds used for this Probe, which indicates when a Probe becomes unhealthy. Possible values range from `1` to `86400`.
         *
         * > **Note:** The `timeout` value should not be greater than the `interval` value.
         */
        timeout: pulumi.Input<number>;
        /**
         * The unhealthy threshold for this Probe, which indicates the amount of retries which should be attempted before a node is deemed unhealthy. Possible values range from `1` to `20`.
         */
        unhealthyThreshold: pulumi.Input<number>;
    }
    interface ApplicationGatewayProbeMatch {
        /**
         * A snippet from the Response Body which must be present in the Response.
         */
        body?: pulumi.Input<string>;
        /**
         * A list of allowed status codes for this Health Probe.
         */
        statusCodes: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ApplicationGatewayRedirectConfiguration {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * Whether to include the path in the redirected URL. Defaults to `false`
         */
        includePath?: pulumi.Input<boolean>;
        /**
         * Whether to include the query string in the redirected URL. Default to `false`
         */
        includeQueryString?: pulumi.Input<boolean>;
        /**
         * Unique name of the redirect configuration block
         */
        name: pulumi.Input<string>;
        /**
         * The type of redirect. Possible values are `Permanent`, `Temporary`, `Found` and `SeeOther`
         */
        redirectType: pulumi.Input<string>;
        targetListenerId?: pulumi.Input<string>;
        /**
         * The name of the listener to redirect to. Cannot be set if `targetUrl` is set.
         */
        targetListenerName?: pulumi.Input<string>;
        /**
         * The URL to redirect the request to. Cannot be set if `targetListenerName` is set.
         */
        targetUrl?: pulumi.Input<string>;
    }
    interface ApplicationGatewayRequestRoutingRule {
        /**
         * The ID of the associated Backend Address Pool.
         */
        backendAddressPoolId?: pulumi.Input<string>;
        /**
         * The Name of the Backend Address Pool which should be used for this Routing Rule. Cannot be set if `redirectConfigurationName` is set.
         */
        backendAddressPoolName?: pulumi.Input<string>;
        /**
         * The ID of the associated Backend HTTP Settings Configuration.
         */
        backendHttpSettingsId?: pulumi.Input<string>;
        /**
         * The Name of the Backend HTTP Settings Collection which should be used for this Routing Rule. Cannot be set if `redirectConfigurationName` is set.
         */
        backendHttpSettingsName?: pulumi.Input<string>;
        /**
         * The ID of the associated HTTP Listener.
         */
        httpListenerId?: pulumi.Input<string>;
        /**
         * The Name of the HTTP Listener which should be used for this Routing Rule.
         */
        httpListenerName: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of this Request Routing Rule.
         */
        name: pulumi.Input<string>;
        /**
         * Rule evaluation order can be dictated by specifying an integer value from `1` to `20000` with `1` being the highest priority and `20000` being the lowest priority.
         *
         * > **Note:** `priority` is required when `sku[0].tier` is set to `*_v2`.
         */
        priority?: pulumi.Input<number>;
        /**
         * The ID of the associated Redirect Configuration.
         */
        redirectConfigurationId?: pulumi.Input<string>;
        /**
         * The Name of the Redirect Configuration which should be used for this Routing Rule. Cannot be set if either `backendAddressPoolName` or `backendHttpSettingsName` is set.
         */
        redirectConfigurationName?: pulumi.Input<string>;
        /**
         * The ID of the associated Rewrite Rule Set.
         */
        rewriteRuleSetId?: pulumi.Input<string>;
        /**
         * The Name of the Rewrite Rule Set which should be used for this Routing Rule. Only valid for v2 SKUs.
         *
         * > **Note:** `backendAddressPoolName`, `backendHttpSettingsName`, `redirectConfigurationName`, and `rewriteRuleSetName` are applicable only when `ruleType` is `Basic`.
         */
        rewriteRuleSetName?: pulumi.Input<string>;
        /**
         * The Type of Routing that should be used for this Rule. Possible values are `Basic` and `PathBasedRouting`.
         */
        ruleType: pulumi.Input<string>;
        /**
         * The ID of the associated URL Path Map.
         */
        urlPathMapId?: pulumi.Input<string>;
        /**
         * The Name of the URL Path Map which should be associated with this Routing Rule.
         */
        urlPathMapName?: pulumi.Input<string>;
    }
    interface ApplicationGatewayRewriteRuleSet {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * Unique name of the rewrite rule set block
         */
        name: pulumi.Input<string>;
        /**
         * One or more `rewriteRule` blocks as defined below.
         */
        rewriteRules?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayRewriteRuleSetRewriteRule>[]>;
    }
    interface ApplicationGatewayRewriteRuleSetRewriteRule {
        /**
         * One or more `condition` blocks as defined above.
         */
        conditions?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayRewriteRuleSetRewriteRuleCondition>[]>;
        /**
         * Unique name of the rewrite rule block
         */
        name: pulumi.Input<string>;
        /**
         * One or more `requestHeaderConfiguration` blocks as defined above.
         */
        requestHeaderConfigurations?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayRewriteRuleSetRewriteRuleRequestHeaderConfiguration>[]>;
        /**
         * One or more `responseHeaderConfiguration` blocks as defined above.
         */
        responseHeaderConfigurations?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayRewriteRuleSetRewriteRuleResponseHeaderConfiguration>[]>;
        /**
         * Rule sequence of the rewrite rule that determines the order of execution in a set.
         */
        ruleSequence: pulumi.Input<number>;
        /**
         * One `url` block as defined below
         */
        url?: pulumi.Input<inputs.network.ApplicationGatewayRewriteRuleSetRewriteRuleUrl>;
    }
    interface ApplicationGatewayRewriteRuleSetRewriteRuleCondition {
        /**
         * Perform a case in-sensitive comparison. Defaults to `false`
         */
        ignoreCase?: pulumi.Input<boolean>;
        /**
         * Negate the result of the condition evaluation. Defaults to `false`
         */
        negate?: pulumi.Input<boolean>;
        /**
         * The pattern, either fixed string or regular expression, that evaluates the truthfulness of the condition.
         */
        pattern: pulumi.Input<string>;
        /**
         * The [variable](https://docs.microsoft.com/azure/application-gateway/rewrite-http-headers#server-variables) of the condition.
         */
        variable: pulumi.Input<string>;
    }
    interface ApplicationGatewayRewriteRuleSetRewriteRuleRequestHeaderConfiguration {
        /**
         * Header name of the header configuration.
         */
        headerName: pulumi.Input<string>;
        /**
         * Header value of the header configuration. To delete a request header set this property to an empty string.
         */
        headerValue: pulumi.Input<string>;
    }
    interface ApplicationGatewayRewriteRuleSetRewriteRuleResponseHeaderConfiguration {
        /**
         * Header name of the header configuration.
         */
        headerName: pulumi.Input<string>;
        /**
         * Header value of the header configuration. To delete a response header set this property to an empty string.
         */
        headerValue: pulumi.Input<string>;
    }
    interface ApplicationGatewayRewriteRuleSetRewriteRuleUrl {
        /**
         * The components used to rewrite the URL. Possible values are `pathOnly` and `queryStringOnly` to limit the rewrite to the URL Path or URL Query String only.
         *
         * > **Note:** One or both of `path` and `queryString` must be specified. If one of these is not specified, it means the value will be empty. If you only want to rewrite `path` or `queryString`, use `components`.
         */
        components?: pulumi.Input<string>;
        /**
         * The URL path to rewrite.
         */
        path?: pulumi.Input<string>;
        /**
         * The query string to rewrite.
         */
        queryString?: pulumi.Input<string>;
        /**
         * Whether the URL path map should be reevaluated after this rewrite has been applied. [More info on rewrite configuration](https://docs.microsoft.com/azure/application-gateway/rewrite-http-headers-url#rewrite-configuration)
         */
        reroute?: pulumi.Input<boolean>;
    }
    interface ApplicationGatewayRoutingRule {
        /**
         * The ID of the associated Backend Address Pool.
         */
        backendAddressPoolId?: pulumi.Input<string>;
        /**
         * The Name of the Backend Address Pool which should be used for this Routing Rule.
         */
        backendAddressPoolName: pulumi.Input<string>;
        /**
         * The ID of the associated Backend Settings.
         */
        backendId?: pulumi.Input<string>;
        /**
         * The Name of the Backend Settings which should be used for this Routing Rule.
         */
        backendName: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The ID of the associated Listener.
         */
        listenerId?: pulumi.Input<string>;
        /**
         * The Name of the Listener which should be used for this Routing Rule.
         */
        listenerName: pulumi.Input<string>;
        /**
         * The Name of this Routing Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The routing rule priority, indicating the order in which rules are evaluated. Possible values range between `1` and `20000`, with `1` being the highest priority and `20000` being the lowest priority.
         */
        priority: pulumi.Input<number>;
    }
    interface ApplicationGatewaySku {
        /**
         * The Capacity of the SKU to use for this Application Gateway. When using a V1 SKU this value must be between `1` and `32`, and `1` to `125` for a V2 SKU. When using a `Basic` SKU this property must be between `1` and `2`. This property is optional if `autoscaleConfiguration` is set.
         */
        capacity?: pulumi.Input<number>;
        /**
         * The Name of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard_Small`, `Standard_Medium`, `Standard_Large`, `Standard_v2`, `WAF_Large`, `WAF_Medium` and `WAF_v2`.
         *
         * > **Note:** `Standard_Small`, `Standard_Medium`, `Standard_Large`, `WAF_Medium`, and `WAF_Large` values are deprecated. `name` can no longer be created with or updated to these values. Refer to <https://aka.ms/V1retirement>.
         */
        name: pulumi.Input<string>;
        /**
         * The Tier of the SKU to use for this Application Gateway. Possible values are `Basic`, `Standard`, `Standard_v2`, `WAF`, and `WAF_v2`.
         *
         * > **Note:** `Standard` and `WAF` values are deprecated. `tier` can no longer be created with or updated to these values. Refer to <https://aka.ms/V1retirement>.
         */
        tier: pulumi.Input<string>;
    }
    interface ApplicationGatewaySslCertificate {
        /**
         * The base64-encoded PFX certificate data. Required if `keyVaultSecretId` is not set.
         *
         * > **Note:** When specifying a file, use `data = filebase64("path/to/file")` to encode the contents of that file.
         */
        data?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret ID of the (base-64 encoded unencrypted pfx) `Secret` or `Certificate` object stored in Azure KeyVault. You need to enable soft delete for Key Vault to use this feature. Required if `data` is not set.
         *
         * > **Note:** To implement certificate rotation, the `azure.keyvault.Secret` attribute `versionlessId` should be used, although `id` is also supported.
         *
         * > **Note:** TLS termination with Key Vault certificates is limited to the [v2 SKUs](https://docs.microsoft.com/azure/application-gateway/key-vault-certs).
         *
         * > **Note:** For TLS termination with Key Vault certificates to work properly, an existing user-assigned managed identity, which Application Gateway uses to retrieve certificates from Key Vault, should be defined via `identity` block. Additionally, access policies in the Key Vault to allow the identity to be granted *get* access to the secret should be defined.
         */
        keyVaultSecretId?: pulumi.Input<string>;
        /**
         * The Name of the SSL certificate that is unique within this Application Gateway
         */
        name: pulumi.Input<string>;
        /**
         * Password for the pfx file specified in data. Required if `data` is set.
         */
        password?: pulumi.Input<string>;
        /**
         * The Public Certificate Data associated with the SSL Certificate.
         */
        publicCertData?: pulumi.Input<string>;
    }
    interface ApplicationGatewaySslPolicy {
        cipherSuites?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
         *
         * > **Note:** `disabledProtocols` cannot be set when `policyName` or `policyType` are set.
         */
        disabledProtocols?: pulumi.Input<pulumi.Input<string>[]>;
        minProtocolVersion?: pulumi.Input<string>;
        policyName?: pulumi.Input<string>;
        /**
         * The Type of the Policy. Possible values are `Predefined`, `Custom` and `CustomV2`.
         *
         * > **Note:** `policyType` is Required when `policyName` is set - cannot be set if `disabledProtocols` is set.
         */
        policyType?: pulumi.Input<string>;
    }
    interface ApplicationGatewaySslProfile {
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the SSL Profile that is unique within this Application Gateway.
         */
        name: pulumi.Input<string>;
        /**
         * a `sslPolicy` block as defined below.
         */
        sslPolicy?: pulumi.Input<inputs.network.ApplicationGatewaySslProfileSslPolicy>;
        /**
         * The name of the Trusted Client Certificate that will be used to authenticate requests from clients.
         */
        trustedClientCertificateNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * @deprecated the `ssl_profile.verify_client_cert_issuer_dn` property has been deprecated in favour of the `ssl_profile.verify_client_certificate_issuer_dn` property and will be removed in v5.0 of the AzureRM provider
         */
        verifyClientCertIssuerDn?: pulumi.Input<boolean>;
        /**
         * Should client certificate issuer DN be verified? Defaults to `false`.
         */
        verifyClientCertificateIssuerDn?: pulumi.Input<boolean>;
        /**
         * Specify the method to check client certificate revocation status. Possible value is `OCSP`.
         */
        verifyClientCertificateRevocation?: pulumi.Input<string>;
    }
    interface ApplicationGatewaySslProfileSslPolicy {
        cipherSuites?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of SSL Protocols which should be disabled on this Application Gateway. Possible values are `TLSv1_0`, `TLSv1_1`, `TLSv1_2` and `TLSv1_3`.
         *
         * > **Note:** `disabledProtocols` cannot be set when `policyName` or `policyType` are set.
         */
        disabledProtocols?: pulumi.Input<pulumi.Input<string>[]>;
        minProtocolVersion?: pulumi.Input<string>;
        policyName?: pulumi.Input<string>;
        /**
         * The Type of the Policy. Possible values are `Predefined`, `Custom` and `CustomV2`.
         *
         * > **Note:** `policyType` is Required when `policyName` is set - cannot be set if `disabledProtocols` is set.
         */
        policyType?: pulumi.Input<string>;
    }
    interface ApplicationGatewayTrustedClientCertificate {
        /**
         * The base-64 encoded certificate.
         */
        data: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the Trusted Client Certificate that is unique within this Application Gateway.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayTrustedRootCertificate {
        /**
         * The contents of the Trusted Root Certificate which should be used. Required if `keyVaultSecretId` is not set.
         */
        data?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Secret ID of the (base-64 encoded unencrypted pfx) `Secret` or `Certificate` object stored in Azure KeyVault. You need to enable soft delete for the Key Vault to use this feature. Required if `data` is not set.
         *
         * > **Note:** To implement certificate rotation, `versionlessSecretId` should be used, although `secretId` is also supported.
         *
         * > **Note:** TLS termination with Key Vault certificates is limited to the [v2 SKUs](https://docs.microsoft.com/azure/application-gateway/key-vault-certs).
         *
         * > **Note:** For TLS termination with Key Vault certificates to work properly, an existing user-assigned managed identity, which Application Gateway uses to retrieve certificates from Key Vault, should be defined via `identity` block. Additionally, access policies in the Key Vault to allow the identity to be granted *get* access to the secret should be defined.
         */
        keyVaultSecretId?: pulumi.Input<string>;
        /**
         * The Name of the Trusted Root Certificate to use.
         */
        name: pulumi.Input<string>;
    }
    interface ApplicationGatewayUrlPathMap {
        /**
         * The ID of the Default Backend Address Pool.
         */
        defaultBackendAddressPoolId?: pulumi.Input<string>;
        /**
         * The Name of the Default Backend Address Pool which should be used for this URL Path Map. Cannot be set if `defaultRedirectConfigurationName` is set.
         */
        defaultBackendAddressPoolName?: pulumi.Input<string>;
        /**
         * The ID of the Default Backend HTTP Settings Collection.
         */
        defaultBackendHttpSettingsId?: pulumi.Input<string>;
        /**
         * The Name of the Default Backend HTTP Settings Collection which should be used for this URL Path Map. Cannot be set if `defaultRedirectConfigurationName` is set.
         */
        defaultBackendHttpSettingsName?: pulumi.Input<string>;
        /**
         * The ID of the Default Redirect Configuration.
         */
        defaultRedirectConfigurationId?: pulumi.Input<string>;
        /**
         * The Name of the Default Redirect Configuration which should be used for this URL Path Map. Cannot be set if either `defaultBackendAddressPoolName` or `defaultBackendHttpSettingsName` is set.
         *
         * > **Note:** Both `defaultBackendAddressPoolName` and `defaultBackendHttpSettingsName` or `defaultRedirectConfigurationName` should be specified.
         */
        defaultRedirectConfigurationName?: pulumi.Input<string>;
        defaultRewriteRuleSetId?: pulumi.Input<string>;
        /**
         * The Name of the Default Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
         */
        defaultRewriteRuleSetName?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the URL Path Map.
         */
        name: pulumi.Input<string>;
        /**
         * One or more `pathRule` blocks as defined above.
         */
        pathRules: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayUrlPathMapPathRule>[]>;
    }
    interface ApplicationGatewayUrlPathMapPathRule {
        /**
         * The ID of the associated Backend Address Pool.
         */
        backendAddressPoolId?: pulumi.Input<string>;
        /**
         * The Name of the Backend Address Pool to use for this Path Rule. Cannot be set if `redirectConfigurationName` is set.
         */
        backendAddressPoolName?: pulumi.Input<string>;
        /**
         * The ID of the associated Backend HTTP Settings Configuration.
         */
        backendHttpSettingsId?: pulumi.Input<string>;
        /**
         * The Name of the Backend HTTP Settings Collection to use for this Path Rule. Cannot be set if `redirectConfigurationName` is set.
         */
        backendHttpSettingsName?: pulumi.Input<string>;
        /**
         * The ID of the Web Application Firewall Policy which should be used as an HTTP Listener.
         */
        firewallPolicyId?: pulumi.Input<string>;
        /**
         * The ID of the Rewrite Rule Set
         */
        id?: pulumi.Input<string>;
        /**
         * The Name of the Path Rule.
         */
        name: pulumi.Input<string>;
        /**
         * A list of Paths used in this Path Rule.
         */
        paths: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the associated Redirect Configuration.
         */
        redirectConfigurationId?: pulumi.Input<string>;
        /**
         * The Name of a Redirect Configuration to use for this Path Rule. Cannot be set if `backendAddressPoolName` or `backendHttpSettingsName` is set.
         */
        redirectConfigurationName?: pulumi.Input<string>;
        /**
         * The ID of the associated Rewrite Rule Set.
         */
        rewriteRuleSetId?: pulumi.Input<string>;
        /**
         * The Name of the Rewrite Rule Set which should be used for this URL Path Map. Only valid for v2 SKUs.
         */
        rewriteRuleSetName?: pulumi.Input<string>;
    }
    interface ApplicationGatewayWafConfiguration {
        /**
         * One or more `disabledRuleGroup` blocks as defined below.
         */
        disabledRuleGroups?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayWafConfigurationDisabledRuleGroup>[]>;
        /**
         * Is the Web Application Firewall enabled?
         */
        enabled: pulumi.Input<boolean>;
        /**
         * One or more `exclusion` blocks as defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.network.ApplicationGatewayWafConfigurationExclusion>[]>;
        /**
         * The File Upload Limit in MB. Accepted values are in the range `1`MB to `750`MB for the `WAF_v2` SKU, and `1`MB to `500`MB for all other SKUs. Defaults to `100`MB.
         */
        fileUploadLimitMb?: pulumi.Input<number>;
        /**
         * The Web Application Firewall Mode. Possible values are `Detection` and `Prevention`.
         */
        firewallMode: pulumi.Input<string>;
        /**
         * The Maximum Request Body Size in KB. Accepted values are in the range `1`KB to `128`KB. Defaults to `128`KB.
         */
        maxRequestBodySizeKb?: pulumi.Input<number>;
        /**
         * Is Request Body Inspection enabled? Defaults to `true`.
         */
        requestBodyCheck?: pulumi.Input<boolean>;
        /**
         * The Type of the Rule Set used for this Web Application Firewall. Possible values are `OWASP`, `Microsoft_BotManagerRuleSet` and `Microsoft_DefaultRuleSet`. Defaults to `OWASP`.
         */
        ruleSetType?: pulumi.Input<string>;
        /**
         * The Version of the Rule Set used for this Web Application Firewall. Possible values are `0.1`, `1.0`, `1.1`, `2.1`, `2.2`, `2.2.9`, `3.0`, `3.1` and `3.2`.
         */
        ruleSetVersion: pulumi.Input<string>;
    }
    interface ApplicationGatewayWafConfigurationDisabledRuleGroup {
        /**
         * The rule group where specific rules should be disabled. Possible values are `BadBots`, `crs20ProtocolViolations`, `crs21ProtocolAnomalies`, `crs23RequestLimits`, `crs30HttpPolicy`, `crs35BadRobots`, `crs40GenericAttacks`, `crs41SqlInjectionAttacks`, `crs41XssAttacks`, `crs42TightSecurity`, `crs45Trojans`, `crs49InboundBlocking`, `General`, `GoodBots`, `KnownBadBots`, `Known-CVEs`, `REQUEST-911-METHOD-ENFORCEMENT`, `REQUEST-913-SCANNER-DETECTION`, `REQUEST-920-PROTOCOL-ENFORCEMENT`, `REQUEST-921-PROTOCOL-ATTACK`, `REQUEST-930-APPLICATION-ATTACK-LFI`, `REQUEST-931-APPLICATION-ATTACK-RFI`, `REQUEST-932-APPLICATION-ATTACK-RCE`, `REQUEST-933-APPLICATION-ATTACK-PHP`, `REQUEST-941-APPLICATION-ATTACK-XSS`, `REQUEST-942-APPLICATION-ATTACK-SQLI`, `REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION`, `REQUEST-944-APPLICATION-ATTACK-JAVA`, `UnknownBots`, `METHOD-ENFORCEMENT`, `PROTOCOL-ENFORCEMENT`, `PROTOCOL-ATTACK`, `LFI`, `RFI`, `RCE`, `PHP`, `NODEJS`, `XSS`, `SQLI`, `FIX`, `JAVA`, `MS-ThreatIntel-WebShells`, `MS-ThreatIntel-AppSec`, `MS-ThreatIntel-SQLI`, `MS-ThreatIntel-CVEs` and `MS-ThreatIntel-XSS`.
         */
        ruleGroupName: pulumi.Input<string>;
        /**
         * A list of rules which should be disabled in that group. Disables all rules in the specified group if `rules` is not specified.
         */
        rules?: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface ApplicationGatewayWafConfigurationExclusion {
        /**
         * Match variable of the exclusion rule to exclude header, cookie or GET arguments. Possible values are `RequestArgKeys`, `RequestArgNames`, `RequestArgValues`, `RequestCookieKeys`, `RequestCookieNames`, `RequestCookieValues`, `RequestHeaderKeys`, `RequestHeaderNames` and `RequestHeaderValues`
         */
        matchVariable: pulumi.Input<string>;
        /**
         * String value which will be used for the filter operation. If empty will exclude all traffic on this `matchVariable`
         */
        selector?: pulumi.Input<string>;
        /**
         * Operator which will be used to search in the variable content. Possible values are `Contains`, `EndsWith`, `Equals`, `EqualsAny` and `StartsWith`. If empty will exclude all traffic on this `matchVariable`
         */
        selectorMatchOperator?: pulumi.Input<string>;
    }
    interface ExpressRouteCircuitPeeringIpv6 {
        /**
         * A boolean value indicating whether the IPv6 peering is enabled. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * A `microsoftPeering` block as defined below.
         */
        microsoftPeering?: pulumi.Input<inputs.network.ExpressRouteCircuitPeeringIpv6MicrosoftPeering>;
        /**
         * A subnet for the primary link.
         */
        primaryPeerAddressPrefix: pulumi.Input<string>;
        /**
         * The ID of the Route Filter. Only available when `peeringType` is set to `MicrosoftPeering`.
         *
         * > **Note:** `ipv6` can be specified when `peeringType` is `MicrosoftPeering` or `AzurePrivatePeering`
         */
        routeFilterId?: pulumi.Input<string>;
        /**
         * A subnet for the secondary link.
         */
        secondaryPeerAddressPrefix: pulumi.Input<string>;
    }
    interface ExpressRouteCircuitPeeringIpv6MicrosoftPeering {
        /**
         * The communities of Bgp Peering specified for microsoft peering.
         */
        advertisedCommunities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Advertised Public Prefixes.
         */
        advertisedPublicPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The CustomerASN of the peering. Defaults to `0`.
         */
        customerAsn?: pulumi.Input<number>;
        /**
         * The Routing Registry against which the AS number and prefixes are registered. For example: `ARIN`, `RIPE`, `AFRINIC` etc. Defaults to `NONE`.
         */
        routingRegistryName?: pulumi.Input<string>;
    }
    interface ExpressRouteCircuitPeeringMicrosoftPeeringConfig {
        /**
         * The communities of Bgp Peering specified for microsoft peering.
         */
        advertisedCommunities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Advertised Public Prefixes.
         */
        advertisedPublicPrefixes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The CustomerASN of the peering. Defaults to `0`.
         */
        customerAsn?: pulumi.Input<number>;
        /**
         * The Routing Registry against which the AS number and prefixes are registered. For example: `ARIN`, `RIPE`, `AFRINIC` etc. Defaults to `NONE`.
         */
        routingRegistryName?: pulumi.Input<string>;
    }
    interface ExpressRouteCircuitSku {
        /**
         * The billing mode for bandwidth. Possible values are `MeteredData` or `UnlimitedData`.
         *
         * > **Note:** You can migrate from `MeteredData` to `UnlimitedData`, but not the other way around.
         */
        family: pulumi.Input<string>;
        /**
         * The service tier. Possible values are `Basic`, `Local`, `Standard` or `Premium`.
         */
        tier: pulumi.Input<string>;
    }
    interface ExpressRouteConnectionRouting {
        /**
         * The ID of the Virtual Hub Route Table associated with this Express Route Connection.
         */
        associatedRouteTableId?: pulumi.Input<string>;
        /**
         * The ID of the Route Map associated with this Express Route Connection for inbound routes.
         */
        inboundRouteMapId?: pulumi.Input<string>;
        /**
         * The ID of the Route Map associated with this Express Route Connection for outbound routes.
         */
        outboundRouteMapId?: pulumi.Input<string>;
        /**
         * A `propagatedRouteTable` block as defined below.
         */
        propagatedRouteTable?: pulumi.Input<inputs.network.ExpressRouteConnectionRoutingPropagatedRouteTable>;
    }
    interface ExpressRouteConnectionRoutingPropagatedRouteTable {
        /**
         * The list of labels to logically group route tables.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of IDs of the Virtual Hub Route Table to propagate routes from Express Route Connection to the route table.
         */
        routeTableIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ExpressRoutePortIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Express Route Port.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Express Route Port. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ExpressRoutePortLink1 {
        /**
         * Whether enable administration state on the Express Route Port Link? Defaults to `false`.
         */
        adminEnabled?: pulumi.Input<boolean>;
        /**
         * The connector type of the Express Route Port Link.
         */
        connectorType?: pulumi.Input<string>;
        /**
         * The ID of this Express Route Port Link.
         */
        id?: pulumi.Input<string>;
        /**
         * The interface name of the Azure router associated with the Express Route Port Link.
         */
        interfaceName?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret that contains the Mac security CAK key for this Express Route Port Link.
         */
        macsecCakKeyvaultSecretId?: pulumi.Input<string>;
        /**
         * The MACSec cipher used for this Express Route Port Link. Possible values are `GcmAes128`, `GcmAes256`, `GcmAesXpn128` and `GcmAesXpn256`. Defaults to `GcmAes128`.
         */
        macsecCipher?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret that contains the MACSec CKN key for this Express Route Port Link.
         */
        macsecCknKeyvaultSecretId?: pulumi.Input<string>;
        /**
         * Should Secure Channel Identifier on the Express Route Port Link be enabled? Defaults to `false`.
         *
         * > **Note:** `macsecCknKeyvaultSecretId` and `macsecCakKeyvaultSecretId` should be used together with `identity`, so that the Express Route Port instance have the right permission to access the Key Vault.
         */
        macsecSciEnabled?: pulumi.Input<boolean>;
        /**
         * The ID that maps from the Express Route Port Link to the patch panel port.
         */
        patchPanelId?: pulumi.Input<string>;
        /**
         * The ID that maps from the patch panel port to the rack.
         */
        rackId?: pulumi.Input<string>;
        /**
         * The name of the Azure router associated with the Express Route Port Link.
         */
        routerName?: pulumi.Input<string>;
    }
    interface ExpressRoutePortLink2 {
        /**
         * Whether enable administration state on the Express Route Port Link? Defaults to `false`.
         */
        adminEnabled?: pulumi.Input<boolean>;
        /**
         * The connector type of the Express Route Port Link.
         */
        connectorType?: pulumi.Input<string>;
        /**
         * The ID of this Express Route Port Link.
         */
        id?: pulumi.Input<string>;
        /**
         * The interface name of the Azure router associated with the Express Route Port Link.
         */
        interfaceName?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret that contains the Mac security CAK key for this Express Route Port Link.
         */
        macsecCakKeyvaultSecretId?: pulumi.Input<string>;
        /**
         * The MACSec cipher used for this Express Route Port Link. Possible values are `GcmAes128`, `GcmAes256`, `GcmAesXpn128` and `GcmAesXpn256`. Defaults to `GcmAes128`.
         */
        macsecCipher?: pulumi.Input<string>;
        /**
         * The ID of the Key Vault Secret that contains the MACSec CKN key for this Express Route Port Link.
         */
        macsecCknKeyvaultSecretId?: pulumi.Input<string>;
        /**
         * Should Secure Channel Identifier on the Express Route Port Link be enabled? Defaults to `false`.
         *
         * > **Note:** `macsecCknKeyvaultSecretId` and `macsecCakKeyvaultSecretId` should be used together with `identity`, so that the Express Route Port instance have the right permission to access the Key Vault.
         */
        macsecSciEnabled?: pulumi.Input<boolean>;
        /**
         * The ID that maps from the Express Route Port Link to the patch panel port.
         */
        patchPanelId?: pulumi.Input<string>;
        /**
         * The ID that maps from the patch panel port to the rack.
         */
        rackId?: pulumi.Input<string>;
        /**
         * The name of the Azure router associated with the Express Route Port Link.
         */
        routerName?: pulumi.Input<string>;
    }
    interface FirewallApplicationRuleCollectionRule {
        /**
         * Specifies a description for the rule.
         */
        description?: pulumi.Input<string>;
        /**
         * A list of FQDN tags. Possible values are `AppServiceEnvironment`, `AzureBackup`, `AzureKubernetesService`, `HDInsight`, `MicrosoftActiveProtectionService`, `WindowsDiagnostics`, `WindowsUpdate` and `WindowsVirtualDesktop`.
         */
        fqdnTags?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the rule.
         */
        name: pulumi.Input<string>;
        /**
         * One or more `protocol` blocks as defined below.
         */
        protocols?: pulumi.Input<pulumi.Input<inputs.network.FirewallApplicationRuleCollectionRuleProtocol>[]>;
        /**
         * A list of source IP addresses and/or IP ranges.
         */
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of source IP Group IDs for the rule.
         *
         * > **Note:** At least one of `sourceAddresses` and `sourceIpGroups` must be specified for a rule.
         */
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of FQDNs.
         */
        targetFqdns?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallApplicationRuleCollectionRuleProtocol {
        /**
         * Specify a port for the connection.
         */
        port: pulumi.Input<number>;
        /**
         * Specifies the type of connection. Possible values are `Http`, `Https` and `Mssql`.
         */
        type: pulumi.Input<string>;
    }
    interface FirewallIpConfiguration {
        /**
         * Specifies the name of the IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The private IP address associated with the Firewall.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The ID of the Public IP Address associated with the firewall.
         *
         * > **Note:** A public ip address is required unless a `managementIpConfiguration` block is specified.
         *
         * > **Note:** When multiple `ipConfiguration` blocks with `publicIpAddressId` are configured, `pulumi up` will raise an error when one or some of these `ipConfiguration` blocks are removed. because the `publicIpAddressId` is still used by the `firewall` resource until the `firewall` resource is updated. and the destruction of `azure.network.PublicIp` happens before the update of firewall by default. to destroy of `azure.network.PublicIp` will cause the error. The workaround is to set `create_before_destroy=true` to the `azure.network.PublicIp` resource `lifecycle` block. See more detail: destroying.md#create-before-destroy
         *
         * > **Note:** The Public IP must have a `Static` allocation and `Standard` SKU.
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.
         *
         * > **Note:** The Subnet used for the Firewall must have the name `AzureFirewallSubnet` and the subnet mask must be at least a `/26`.
         *
         * > **Note:** At least one and only one `ipConfiguration` block may contain a `subnetId`.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface FirewallManagementIpConfiguration {
        /**
         * Specifies the name of the IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * The private IP address associated with the Firewall.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The ID of the Public IP Address associated with the firewall.
         *
         * > **Note:** The Public IP must have a `Static` allocation and `Standard` SKU.
         */
        publicIpAddressId: pulumi.Input<string>;
        /**
         * Reference to the subnet associated with the IP Configuration. Changing this forces a new resource to be created.
         *
         * > **Note:** The Management Subnet used for the Firewall must have the name `AzureFirewallManagementSubnet` and the subnet mask must be at least a `/26`.
         */
        subnetId: pulumi.Input<string>;
    }
    interface FirewallNatRuleCollectionRule {
        /**
         * Specifies a description for the rule.
         */
        description?: pulumi.Input<string>;
        /**
         * A list of destination IP addresses and/or IP ranges.
         */
        destinationAddresses: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of destination ports.
         */
        destinationPorts: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the rule.
         */
        name: pulumi.Input<string>;
        /**
         * A list of protocols. Possible values are `Any`, `ICMP`, `TCP` and `UDP`. If `action` is `Dnat`, protocols can only be `TCP` and `UDP`.
         */
        protocols: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of source IP addresses and/or IP ranges.
         */
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of source IP Group IDs for the rule.
         *
         * > **Note:** At least one of `sourceAddresses` and `sourceIpGroups` must be specified for a rule.
         */
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The address of the service behind the Firewall.
         */
        translatedAddress: pulumi.Input<string>;
        /**
         * The port of the service behind the Firewall.
         */
        translatedPort: pulumi.Input<string>;
    }
    interface FirewallNetworkRuleCollectionRule {
        /**
         * Specifies a description for the rule.
         */
        description?: pulumi.Input<string>;
        /**
         * Either a list of destination IP addresses and/or IP ranges, or a list of destination [Service Tags](https://docs.microsoft.com/azure/virtual-network/service-tags-overview#available-service-tags).
         */
        destinationAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of destination FQDNS for the rule.
         *
         * > **Note:** [You must enable DNS Proxy to use FQDNs in your network rules](https://docs.microsoft.com/azure/firewall/fqdn-filtering-network-rules).
         *
         * > **Note:** At least one of `destinationAddresses`, `destinationIpGroups` and `destinationFqdns` must be specified for a rule.
         */
        destinationFqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of destination IP Group IDs for the rule.
         */
        destinationIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of destination ports.
         */
        destinationPorts: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the rule.
         */
        name: pulumi.Input<string>;
        /**
         * A list of protocols. Possible values are `Any`, `ICMP`, `TCP` and `UDP`.
         */
        protocols: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of source IP addresses and/or IP ranges.
         */
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of IP Group IDs for the rule.
         *
         * > **Note:** At least one of `sourceAddresses` and `sourceIpGroups` must be specified for a rule.
         */
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyDns {
        /**
         * Whether to enable DNS proxy on Firewalls attached to this Firewall Policy? Defaults to `false`.
         */
        proxyEnabled?: pulumi.Input<boolean>;
        /**
         * A list of custom DNS servers' IP addresses.
         */
        servers?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyExplicitProxy {
        /**
         * Whether the pac file port and url need to be provided.
         */
        enablePacFile?: pulumi.Input<boolean>;
        /**
         * Whether the explicit proxy is enabled for this Firewall Policy.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The port number for explicit http protocol.
         */
        httpPort?: pulumi.Input<number>;
        /**
         * The port number for explicit proxy https protocol.
         */
        httpsPort?: pulumi.Input<number>;
        /**
         * Specifies a SAS URL for PAC file.
         */
        pacFile?: pulumi.Input<string>;
        /**
         * Specifies a port number for firewall to serve PAC file.
         */
        pacFilePort?: pulumi.Input<number>;
    }
    interface FirewallPolicyIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Firewall Policy.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Firewall Policy. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface FirewallPolicyInsights {
        /**
         * The ID of the default Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to, when there is no location matches in the `logAnalyticsWorkspace`.
         */
        defaultLogAnalyticsWorkspaceId: pulumi.Input<string>;
        /**
         * Whether the insights functionality is enabled for this Firewall Policy.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A list of `logAnalyticsWorkspace` block as defined below.
         */
        logAnalyticsWorkspaces?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyInsightsLogAnalyticsWorkspace>[]>;
        /**
         * The log retention period in days.
         */
        retentionInDays?: pulumi.Input<number>;
    }
    interface FirewallPolicyInsightsLogAnalyticsWorkspace {
        /**
         * The location of the Firewalls, that when matches this Log Analytics Workspace will be used to consume their logs.
         */
        firewallLocation: pulumi.Input<string>;
        /**
         * The ID of the Log Analytics Workspace that the Firewalls associated with this Firewall Policy will send their logs to when their locations match the `firewallLocation`.
         */
        id: pulumi.Input<string>;
    }
    interface FirewallPolicyIntrusionDetection {
        /**
         * In which mode you want to run intrusion detection: `Off`, `Alert` or `Deny`.
         */
        mode?: pulumi.Input<string>;
        /**
         * A list of Private IP address ranges to identify traffic direction. By default, only ranges defined by IANA RFC 1918 are considered private IP addresses.
         */
        privateRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `signatureOverrides` blocks as defined below.
         */
        signatureOverrides?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyIntrusionDetectionSignatureOverride>[]>;
        /**
         * One or more `trafficBypass` blocks as defined below.
         */
        trafficBypasses?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyIntrusionDetectionTrafficBypass>[]>;
    }
    interface FirewallPolicyIntrusionDetectionSignatureOverride {
        /**
         * 12-digit number (id) which identifies your signature.
         */
        id?: pulumi.Input<string>;
        /**
         * state can be any of `Off`, `Alert` or `Deny`.
         */
        state?: pulumi.Input<string>;
    }
    interface FirewallPolicyIntrusionDetectionTrafficBypass {
        /**
         * The description for this bypass traffic setting.
         */
        description?: pulumi.Input<string>;
        /**
         * Specifies a list of destination IP addresses that shall be bypassed by intrusion detection.
         */
        destinationAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of destination IP groups that shall be bypassed by intrusion detection.
         */
        destinationIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of destination IP ports that shall be bypassed by intrusion detection.
         */
        destinationPorts?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this bypass traffic setting.
         */
        name: pulumi.Input<string>;
        /**
         * The protocols any of `ANY`, `TCP`, `ICMP`, `UDP` that shall be bypassed by intrusion detection.
         */
        protocol: pulumi.Input<string>;
        /**
         * Specifies a list of source addresses that shall be bypassed by intrusion detection.
         */
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of source IP groups that shall be bypassed by intrusion detection.
         */
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyRuleCollectionGroupApplicationRuleCollection {
        /**
         * The action to take for the application rules in this collection. Possible values are `Allow` and `Deny`.
         */
        action: pulumi.Input<string>;
        /**
         * The name which should be used for this application rule collection.
         */
        name: pulumi.Input<string>;
        /**
         * The priority of the application rule collection. The range is `100` - `65000`.
         */
        priority: pulumi.Input<number>;
        /**
         * One or more `applicationRule` blocks as defined below.
         */
        rules: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule>[]>;
    }
    interface FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRule {
        description?: pulumi.Input<string>;
        destinationAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of destination FQDN tags.
         */
        destinationFqdnTags?: pulumi.Input<pulumi.Input<string>[]>;
        destinationFqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of destination URLs for which policy should hold. Needs Premium SKU for Firewall Policy. Conflicts with `destinationFqdns`.
         */
        destinationUrls?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of HTTP/HTTPS headers to insert. One or more `httpHeaders` blocks as defined below.
         */
        httpHeaders?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeader>[]>;
        /**
         * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
         */
        name: pulumi.Input<string>;
        protocols?: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol>[]>;
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Boolean specifying if TLS shall be terminated (true) or not (false). Must be `true` when using `destinationUrls`. Needs Premium SKU for Firewall Policy.
         */
        terminateTls?: pulumi.Input<boolean>;
        /**
         * Specifies a list of web categories to which access is denied or allowed depending on the value of `action` above. Needs Premium SKU for Firewall Policy.
         */
        webCategories?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleHttpHeader {
        /**
         * Specifies the name of the header.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the value.
         */
        value: pulumi.Input<string>;
    }
    interface FirewallPolicyRuleCollectionGroupApplicationRuleCollectionRuleProtocol {
        /**
         * Port number of the protocol. Range is 0-64000.
         */
        port: pulumi.Input<number>;
        /**
         * Protocol type. Possible values are `Http` and `Https`.
         */
        type: pulumi.Input<string>;
    }
    interface FirewallPolicyRuleCollectionGroupNatRuleCollection {
        /**
         * The action to take for the NAT rules in this collection. Currently, the only possible value is `Dnat`.
         */
        action: pulumi.Input<string>;
        /**
         * The name which should be used for this NAT rule collection.
         */
        name: pulumi.Input<string>;
        /**
         * The priority of the NAT rule collection. The range is `100` - `65000`.
         */
        priority: pulumi.Input<number>;
        /**
         * A `natRule` block as defined below.
         */
        rules: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyRuleCollectionGroupNatRuleCollectionRule>[]>;
    }
    interface FirewallPolicyRuleCollectionGroupNatRuleCollectionRule {
        description?: pulumi.Input<string>;
        /**
         * The destination IP address (including CIDR).
         */
        destinationAddress?: pulumi.Input<string>;
        destinationPorts?: pulumi.Input<string>;
        /**
         * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
         */
        name: pulumi.Input<string>;
        protocols: pulumi.Input<pulumi.Input<string>[]>;
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the translated address.
         */
        translatedAddress?: pulumi.Input<string>;
        /**
         * Specifies the translated FQDN.
         *
         * > **Note:** Exactly one of `translatedAddress` and `translatedFqdn` should be set.
         */
        translatedFqdn?: pulumi.Input<string>;
        /**
         * Specifies the translated port.
         */
        translatedPort: pulumi.Input<number>;
    }
    interface FirewallPolicyRuleCollectionGroupNetworkRuleCollection {
        /**
         * The action to take for the network rules in this collection. Possible values are `Allow` and `Deny`.
         */
        action: pulumi.Input<string>;
        /**
         * The name which should be used for this network rule collection.
         */
        name: pulumi.Input<string>;
        /**
         * The priority of the network rule collection. The range is `100` - `65000`.
         */
        priority: pulumi.Input<number>;
        /**
         * One or more `networkRule` blocks as defined below.
         */
        rules: pulumi.Input<pulumi.Input<inputs.network.FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule>[]>;
    }
    interface FirewallPolicyRuleCollectionGroupNetworkRuleCollectionRule {
        description?: pulumi.Input<string>;
        destinationAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        destinationFqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of destination IP groups.
         */
        destinationIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
        destinationPorts: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this Firewall Policy Rule Collection Group. Changing this forces a new Firewall Policy Rule Collection Group to be created.
         */
        name: pulumi.Input<string>;
        protocols: pulumi.Input<pulumi.Input<string>[]>;
        sourceAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        sourceIpGroups?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyThreatIntelligenceAllowlist {
        /**
         * A list of FQDNs that will be skipped for threat detection.
         */
        fqdns?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of IP addresses or CIDR ranges that will be skipped for threat detection.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface FirewallPolicyTlsCertificate {
        /**
         * The Secret Identifier (URI) of the certificate stored in Azure Key Vault, either as a secret or certificate.
         */
        keyVaultSecretId: pulumi.Input<string>;
        /**
         * The name of the certificate.
         */
        name: pulumi.Input<string>;
    }
    interface FirewallVirtualHub {
        /**
         * The private IP address associated with the Firewall.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The list of public IP addresses associated with the Firewall.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the number of public IPs to assign to the Firewall. Defaults to `1`.
         */
        publicIpCount?: pulumi.Input<number>;
        /**
         * Specifies the ID of the Virtual Hub where the Firewall resides in.
         */
        virtualHubId: pulumi.Input<string>;
    }
    interface LocalNetworkGatewayBgpSettings {
        /**
         * The BGP speaker's ASN.
         */
        asn: pulumi.Input<number>;
        /**
         * The BGP peering address and BGP identifier of this BGP speaker.
         */
        bgpPeeringAddress: pulumi.Input<string>;
        /**
         * The weight added to routes learned from this BGP speaker.
         */
        peerWeight?: pulumi.Input<number>;
    }
    interface NetworkConnectionMonitorEndpoint {
        /**
         * The IP address or domain name of the Network Connection Monitor endpoint.
         */
        address?: pulumi.Input<string>;
        /**
         * The test coverage for the Network Connection Monitor endpoint. Possible values are `AboveAverage`, `Average`, `BelowAverage`, `Default`, `Full` and `Low`.
         */
        coverageLevel?: pulumi.Input<string>;
        /**
         * A list of IPv4/IPv6 subnet masks or IPv4/IPv6 IP addresses to be excluded to the Network Connection Monitor endpoint.
         */
        excludedIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `filter` block as defined below.
         */
        filter?: pulumi.Input<inputs.network.NetworkConnectionMonitorEndpointFilter>;
        /**
         * A list of IPv4/IPv6 subnet masks or IPv4/IPv6 IP addresses to be included to the Network Connection Monitor endpoint.
         */
        includedIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the endpoint for the Network Connection Monitor .
         */
        name: pulumi.Input<string>;
        /**
         * The resource ID which is used as the endpoint by the Network Connection Monitor.
         */
        targetResourceId?: pulumi.Input<string>;
        /**
         * The endpoint type of the Network Connection Monitor. Possible values are `AzureArcVM`, `AzureSubnet`, `AzureVM`, `AzureVNet`, `ExternalAddress`, `MMAWorkspaceMachine` and `MMAWorkspaceNetwork`.
         */
        targetResourceType?: pulumi.Input<string>;
    }
    interface NetworkConnectionMonitorEndpointFilter {
        /**
         * A `item` block as defined below.
         */
        items?: pulumi.Input<pulumi.Input<inputs.network.NetworkConnectionMonitorEndpointFilterItem>[]>;
        /**
         * The behaviour type of this endpoint filter. Currently the only allowed value is `Include`. Defaults to `Include`.
         */
        type?: pulumi.Input<string>;
    }
    interface NetworkConnectionMonitorEndpointFilterItem {
        /**
         * The address of the filter item.
         */
        address?: pulumi.Input<string>;
        /**
         * The type of items included in the filter. Possible values are `AgentAddress`. Defaults to `AgentAddress`.
         */
        type?: pulumi.Input<string>;
    }
    interface NetworkConnectionMonitorTestConfiguration {
        /**
         * A `httpConfiguration` block as defined below.
         */
        httpConfiguration?: pulumi.Input<inputs.network.NetworkConnectionMonitorTestConfigurationHttpConfiguration>;
        /**
         * A `icmpConfiguration` block as defined below.
         */
        icmpConfiguration?: pulumi.Input<inputs.network.NetworkConnectionMonitorTestConfigurationIcmpConfiguration>;
        /**
         * The name of test configuration for the Network Connection Monitor.
         */
        name: pulumi.Input<string>;
        /**
         * The preferred IP version which is used in the test evaluation. Possible values are `IPv4` and `IPv6`.
         */
        preferredIpVersion?: pulumi.Input<string>;
        /**
         * The protocol used to evaluate tests. Possible values are `Tcp`, `Http` and `Icmp`.
         */
        protocol: pulumi.Input<string>;
        /**
         * A `successThreshold` block as defined below.
         */
        successThreshold?: pulumi.Input<inputs.network.NetworkConnectionMonitorTestConfigurationSuccessThreshold>;
        /**
         * A `tcpConfiguration` block as defined below.
         */
        tcpConfiguration?: pulumi.Input<inputs.network.NetworkConnectionMonitorTestConfigurationTcpConfiguration>;
        /**
         * The time interval in seconds at which the test evaluation will happen. Defaults to `60`.
         */
        testFrequencyInSeconds?: pulumi.Input<number>;
    }
    interface NetworkConnectionMonitorTestConfigurationHttpConfiguration {
        /**
         * The HTTP method for the HTTP request. Possible values are `Get` and `Post`. Defaults to `Get`.
         */
        method?: pulumi.Input<string>;
        /**
         * The path component of the URI. It only accepts the absolute path.
         */
        path?: pulumi.Input<string>;
        /**
         * The port for the HTTP connection.
         */
        port?: pulumi.Input<number>;
        /**
         * Should HTTPS be preferred over HTTP in cases where the choice is not explicit? Defaults to `false`.
         */
        preferHttps?: pulumi.Input<boolean>;
        /**
         * A `requestHeader` block as defined below.
         */
        requestHeaders?: pulumi.Input<pulumi.Input<inputs.network.NetworkConnectionMonitorTestConfigurationHttpConfigurationRequestHeader>[]>;
        /**
         * The HTTP status codes to consider successful. For instance, `2xx`, `301-304` and `418`.
         */
        validStatusCodeRanges?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkConnectionMonitorTestConfigurationHttpConfigurationRequestHeader {
        /**
         * The name of the HTTP header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the HTTP header.
         */
        value: pulumi.Input<string>;
    }
    interface NetworkConnectionMonitorTestConfigurationIcmpConfiguration {
        /**
         * Should path evaluation with trace route be enabled? Defaults to `true`.
         */
        traceRouteEnabled?: pulumi.Input<boolean>;
    }
    interface NetworkConnectionMonitorTestConfigurationSuccessThreshold {
        /**
         * The maximum percentage of failed checks permitted for a test to be successful.
         */
        checksFailedPercent?: pulumi.Input<number>;
        /**
         * The maximum round-trip time in milliseconds permitted for a test to be successful.
         */
        roundTripTimeMs?: pulumi.Input<number>;
    }
    interface NetworkConnectionMonitorTestConfigurationTcpConfiguration {
        /**
         * The destination port behavior for the TCP connection. Possible values are `None` and `ListenIfAvailable`.
         */
        destinationPortBehavior?: pulumi.Input<string>;
        /**
         * The port for the TCP connection.
         */
        port: pulumi.Input<number>;
        /**
         * Should path evaluation with trace route be enabled? Defaults to `true`.
         */
        traceRouteEnabled?: pulumi.Input<boolean>;
    }
    interface NetworkConnectionMonitorTestGroup {
        /**
         * A list of destination endpoint names.
         */
        destinationEndpoints: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the test group be enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name of the test group for the Network Connection Monitor.
         */
        name: pulumi.Input<string>;
        /**
         * A list of source endpoint names.
         */
        sourceEndpoints: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of test configuration names.
         */
        testConfigurationNames: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkInterfaceIpConfiguration {
        /**
         * The Frontend IP Configuration ID of a Gateway SKU Load Balancer.
         */
        gatewayLoadBalancerFrontendIpConfigurationId?: pulumi.Input<string>;
        /**
         * A name used for this IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this the Primary IP Configuration? Must be `true` for the first `ipConfiguration` when multiple are specified. Defaults to `false`.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * The first private IP address of the network interface.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The allocation method used for the Private IP Address. Possible values are `Dynamic` and `Static`.
         *
         * > **Note:** `Dynamic` means "An IP is automatically assigned during creation of this Network Interface"; `Static` means "User supplied IP address will be used"
         */
        privateIpAddressAllocation: pulumi.Input<string>;
        /**
         * The IP Version to use. Possible values are `IPv4` or `IPv6`. Defaults to `IPv4`.
         */
        privateIpAddressVersion?: pulumi.Input<string>;
        /**
         * Reference to a Public IP Address to associate with this NIC
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * The ID of the Subnet where this Network Interface should be located in.
         *
         * > **Note:** This is required when `privateIpAddressVersion` is set to `IPv4`.
         */
        subnetId?: pulumi.Input<string>;
    }
    interface NetworkManagerAdminRuleDestination {
        /**
         * Specifies the address prefix.
         */
        addressPrefix: pulumi.Input<string>;
        /**
         * Specifies the address prefix type. Possible values are `IPPrefix` and `ServiceTag`. For more information, please see [this document](https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins#source-and-destination-types).
         */
        addressPrefixType: pulumi.Input<string>;
    }
    interface NetworkManagerAdminRuleSource {
        /**
         * Specifies the address prefix.
         */
        addressPrefix: pulumi.Input<string>;
        /**
         * Specifies the address prefix type. Possible values are `IPPrefix` and `ServiceTag`. For more information, please see [this document](https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-security-admins#source-and-destination-types).
         */
        addressPrefixType: pulumi.Input<string>;
    }
    interface NetworkManagerConnectivityConfigurationAppliesToGroup {
        /**
         * Indicates whether to global mesh is supported for this group. Possible values are `true` and `false`.
         *
         * > **Note:** A group can be global only if the `groupConnectivity` is `DirectlyConnected`.
         */
        globalMeshEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the group connectivity type. Possible values are `None` and `DirectlyConnected`.
         */
        groupConnectivity: pulumi.Input<string>;
        /**
         * Specifies the resource ID of Network Group which the configuration applies to.
         */
        networkGroupId: pulumi.Input<string>;
        /**
         * Indicates whether the hub gateway is used. Possible values are `true` and `false`.
         */
        useHubGateway?: pulumi.Input<boolean>;
    }
    interface NetworkManagerConnectivityConfigurationHub {
        /**
         * Specifies the resource ID used as hub in Hub And Spoke topology.
         */
        resourceId: pulumi.Input<string>;
        /**
         * Specifies the resource Type used as hub in Hub And Spoke topology.
         */
        resourceType: pulumi.Input<string>;
    }
    interface NetworkManagerCrossTenantScope {
        /**
         * List of management groups.
         */
        managementGroups?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of subscriptions.
         */
        subscriptions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Tenant ID.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface NetworkManagerRoutingRuleDestination {
        /**
         * The destination address.
         */
        address: pulumi.Input<string>;
        /**
         * The type of destination. Possible values are `AddressPrefix` and `ServiceTag`.
         */
        type: pulumi.Input<string>;
    }
    interface NetworkManagerRoutingRuleNextHop {
        /**
         * The address of the next hop. This is required if the next hop type is `VirtualAppliance`.
         */
        address?: pulumi.Input<string>;
        /**
         * The type of next hop. Possible values are `Internet`, `NoNextHop`, `VirtualAppliance`, `VirtualNetworkGateway` and `VnetLocal`.
         */
        type: pulumi.Input<string>;
    }
    interface NetworkManagerScope {
        /**
         * A list of management group IDs.
         *
         * > **Note:** When specifying a scope at the management group level, you need to register the `Microsoft.Network` at the management group scope before deploying a Network Manager, more information can be found in the [Azure document](https://learn.microsoft.com/en-us/azure/virtual-network-manager/concept-network-manager-scope#scope).
         */
        managementGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of subscription IDs.
         */
        subscriptionIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkManagerVerifierWorkspaceReachabilityAnalysisIntentIpTraffic {
        /**
         * Specifies a list of IPv4 or IPv6 addresses or ranges using CIDR notation of the source you want to verify. Changing this forces a new Network Manager Verifier Workspace Reachability Analysis Intent to be created.
         */
        destinationIps: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of ports or ranges of the destination you want to verify. To specify any port, use `["*"]`. Changing this forces a new Network Manager Verifier Workspace Reachability Analysis Intent to be created.
         */
        destinationPorts: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of network protocols. Possible values are `Any`, `TCP`, `UDP` and `ICMP`. Changing this forces a new Network Manager Verifier Workspace Reachability Analysis Intent to be created.
         */
        protocols: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of IPv4 or IPv6 addresses or ranges using CIDR notation of the source you want to verify. Changing this forces a new Network Manager Verifier Workspace Reachability Analysis Intent to be created.
         */
        sourceIps: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of ports or ranges of the source you want to verify. To specify any port, use `["*"]`. Changing this forces a new Network Manager Verifier Workspace Reachability Analysis Intent to be created.
         */
        sourcePorts: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkSecurityGroupSecurityRule {
        /**
         * Specifies whether network traffic is allowed or denied. Possible values are `Allow` and `Deny`.
         */
        access: pulumi.Input<string>;
        /**
         * A description for this rule. Restricted to 140 characters.
         */
        description?: pulumi.Input<string>;
        /**
         * CIDR or destination IP range or * to match any IP. Tags such as `VirtualNetwork`, `AzureLoadBalancer` and `Internet` can also be used. This is required if `destinationAddressPrefixes` is not specified.
         */
        destinationAddressPrefix?: pulumi.Input<string>;
        /**
         * List of destination address prefixes. Tags may not be used. This is required if `destinationAddressPrefix` is not specified.
         */
        destinationAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A List of destination Application Security Group IDs
         */
        destinationApplicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Destination Port or Range. Integer or range between `0` and `65535` or `*` to match any. This is required if `destinationPortRanges` is not specified.
         */
        destinationPortRange?: pulumi.Input<string>;
        /**
         * List of destination ports or port ranges. This is required if `destinationPortRange` is not specified.
         */
        destinationPortRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The direction specifies if rule will be evaluated on incoming or outgoing traffic. Possible values are `Inbound` and `Outbound`.
         */
        direction: pulumi.Input<string>;
        /**
         * The name of the security rule.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the priority of the rule. The value can be between 100 and 4096. The priority number must be unique for each rule in the collection. The lower the priority number, the higher the priority of the rule.
         */
        priority: pulumi.Input<number>;
        /**
         * Network protocol this rule applies to. Possible values include `Tcp`, `Udp`, `Icmp`, `Esp`, `Ah` or `*` (which matches all).
         */
        protocol: pulumi.Input<string>;
        /**
         * CIDR or source IP range or * to match any IP. Tags such as `VirtualNetwork`, `AzureLoadBalancer` and `Internet` can also be used. This is required if `sourceAddressPrefixes` is not specified.
         */
        sourceAddressPrefix?: pulumi.Input<string>;
        /**
         * List of source address prefixes. Tags may not be used. This is required if `sourceAddressPrefix` is not specified.
         */
        sourceAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A List of source Application Security Group IDs
         */
        sourceApplicationSecurityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Source Port or Range. Integer or range between `0` and `65535` or `*` to match any. This is required if `sourcePortRanges` is not specified.
         */
        sourcePortRange?: pulumi.Input<string>;
        /**
         * List of source ports or port ranges. This is required if `sourcePortRange` is not specified.
         */
        sourcePortRanges?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkWatcherFlowLogRetentionPolicy {
        /**
         * The number of days to retain flow log records.
         */
        days: pulumi.Input<number>;
        /**
         * Boolean flag to enable/disable retention.
         */
        enabled: pulumi.Input<boolean>;
    }
    interface NetworkWatcherFlowLogTrafficAnalytics {
        /**
         * Boolean flag to enable/disable traffic analytics.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * How frequently service should do flow analytics in minutes. Defaults to `60`.
         */
        intervalInMinutes?: pulumi.Input<number>;
        /**
         * The resource GUID of the attached workspace.
         */
        workspaceId: pulumi.Input<string>;
        /**
         * The location of the attached workspace.
         */
        workspaceRegion: pulumi.Input<string>;
        /**
         * The resource ID of the attached workspace.
         */
        workspaceResourceId: pulumi.Input<string>;
    }
    interface PointToPointVpnGatewayConnectionConfiguration {
        /**
         * Should Internet Security be enabled to secure internet traffic? Defaults to `false`.
         */
        internetSecurityEnabled?: pulumi.Input<boolean>;
        /**
         * The Name which should be used for this Connection Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * A `route` block as defined below.
         */
        route?: pulumi.Input<inputs.network.PointToPointVpnGatewayConnectionConfigurationRoute>;
        /**
         * A `vpnClientAddressPool` block as defined below.
         */
        vpnClientAddressPool: pulumi.Input<inputs.network.PointToPointVpnGatewayConnectionConfigurationVpnClientAddressPool>;
    }
    interface PointToPointVpnGatewayConnectionConfigurationRoute {
        /**
         * The Virtual Hub Route Table resource id associated with this Routing Configuration.
         */
        associatedRouteTableId: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for inbound learned routes.
         */
        inboundRouteMapId?: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for outbound advertised routes.
         */
        outboundRouteMapId?: pulumi.Input<string>;
        /**
         * A `propagatedRouteTable` block as defined below.
         */
        propagatedRouteTable?: pulumi.Input<inputs.network.PointToPointVpnGatewayConnectionConfigurationRoutePropagatedRouteTable>;
    }
    interface PointToPointVpnGatewayConnectionConfigurationRoutePropagatedRouteTable {
        /**
         * The list of Virtual Hub Route Table resource id which the routes will be propagated to.
         */
        ids: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of labels to logically group Virtual Hub Route Tables which the routes will be propagated to.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PointToPointVpnGatewayConnectionConfigurationVpnClientAddressPool {
        /**
         * A list of CIDR Ranges which should be used as Address Prefixes.
         */
        addressPrefixes: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ProfileContainerNetworkInterface {
        /**
         * One or more `ipConfiguration` blocks as documented below.
         */
        ipConfigurations: pulumi.Input<pulumi.Input<inputs.network.ProfileContainerNetworkInterfaceIpConfiguration>[]>;
        /**
         * Specifies the name of the IP Configuration.
         */
        name: pulumi.Input<string>;
    }
    interface ProfileContainerNetworkInterfaceIpConfiguration {
        /**
         * Specifies the name of the IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Reference to the subnet associated with the IP Configuration.
         */
        subnetId: pulumi.Input<string>;
    }
    interface RouteFilterRule {
        /**
         * The access type of the rule. The only possible value is `Allow`.
         */
        access: pulumi.Input<string>;
        /**
         * The collection for bgp community values to filter on. e.g. ['12076:5010','12076:5020'].
         */
        communities: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the route filter rule.
         */
        name: pulumi.Input<string>;
        /**
         * The rule type of the rule. The only possible value is `Community`.
         */
        ruleType: pulumi.Input<string>;
    }
    interface RouteMapRule {
        /**
         * An `action` block as defined below.
         */
        actions?: pulumi.Input<pulumi.Input<inputs.network.RouteMapRuleAction>[]>;
        /**
         * A `matchCriterion` block as defined below.
         */
        matchCriterions?: pulumi.Input<pulumi.Input<inputs.network.RouteMapRuleMatchCriterion>[]>;
        /**
         * The unique name for the rule.
         */
        name: pulumi.Input<string>;
        /**
         * The next step after the rule is evaluated. Possible values are `Continue`, `Terminate` and `Unknown`. Defaults to `Unknown`.
         */
        nextStepIfMatched?: pulumi.Input<string>;
    }
    interface RouteMapRuleAction {
        /**
         * A `parameter` block as defined below. Required if `type` is anything other than `Drop`.
         */
        parameters?: pulumi.Input<pulumi.Input<inputs.network.RouteMapRuleActionParameter>[]>;
        /**
         * The type of the action to be taken. Possible values are `Add`, `Drop`, `Remove`, `Replace` and `Unknown`.
         */
        type: pulumi.Input<string>;
    }
    interface RouteMapRuleActionParameter {
        /**
         * A list of AS paths.
         */
        asPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of BGP communities.
         */
        communities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of route prefixes.
         */
        routePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface RouteMapRuleMatchCriterion {
        /**
         * A list of AS paths which this criterion matches.
         */
        asPaths?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of BGP communities which this criterion matches.
         */
        communities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The match condition to apply the rule of the Route Map. Possible values are `Contains`, `Equals`, `NotContains`, `NotEquals` and `Unknown`.
         */
        matchCondition: pulumi.Input<string>;
        /**
         * A list of route prefixes which this criterion matches.
         */
        routePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface RouteTableRoute {
        /**
         * The destination to which the route applies. Can be CIDR (such as `10.1.0.0/16`) or [Azure Service Tag](https://docs.microsoft.com/azure/virtual-network/service-tags-overview) (such as `ApiManagement`, `AzureBackup` or `AzureMonitor`) format.
         */
        addressPrefix: pulumi.Input<string>;
        /**
         * The name of the route.
         */
        name: pulumi.Input<string>;
        /**
         * Contains the IP address packets should be forwarded to. Next hop values are only allowed in routes where the next hop type is `VirtualAppliance`.
         */
        nextHopInIpAddress?: pulumi.Input<string>;
        /**
         * The type of Azure hop the packet should be sent to. Possible values are `VirtualNetworkGateway`, `VnetLocal`, `Internet`, `VirtualAppliance` and `None`.
         */
        nextHopType: pulumi.Input<string>;
    }
    interface RoutingIntentRoutingPolicy {
        /**
         * A list of destinations which this routing policy is applicable to. Possible values are `Internet` and `PrivateTraffic`.
         */
        destinations: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The unique name for the routing policy.
         */
        name: pulumi.Input<string>;
        /**
         * The resource ID of the next hop on which this routing policy is applicable to.
         */
        nextHop: pulumi.Input<string>;
    }
    interface SubnetDelegation {
        /**
         * A name for this delegation.
         */
        name: pulumi.Input<string>;
        /**
         * A `serviceDelegation` block as defined below.
         */
        serviceDelegation: pulumi.Input<inputs.network.SubnetDelegationServiceDelegation>;
    }
    interface SubnetDelegationServiceDelegation {
        /**
         * A list of Actions which should be delegated. This list is specific to the service to delegate to. Possible values are `Microsoft.Network/networkinterfaces/*`, `Microsoft.Network/publicIPAddresses/join/action`, `Microsoft.Network/publicIPAddresses/read`, `Microsoft.Network/virtualNetworks/read`, `Microsoft.Network/virtualNetworks/subnets/action`, `Microsoft.Network/virtualNetworks/subnets/join/action`, `Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action`, and `Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action`.
         *
         * > **NOTE:** Azure may add default actions depending on the service delegation name and they can't be changed.
         */
        actions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of service to delegate to. Possible values are `GitHub.Network/networkSettings`, `Informatica.DataManagement/organizations`, `Microsoft.ApiManagement/service`, `Microsoft.Apollo/npu`, `Microsoft.App/environments`, `Microsoft.App/testClients`, `Microsoft.AVS/PrivateClouds`, `Microsoft.AzureCosmosDB/clusters`, `Microsoft.BareMetal/AzureHostedService`, `Microsoft.BareMetal/AzureHPC`, `Microsoft.BareMetal/AzurePaymentHSM`, `Microsoft.BareMetal/AzureVMware`, `Microsoft.BareMetal/CrayServers`, `Microsoft.BareMetal/MonitoringServers`, `Microsoft.Batch/batchAccounts`, `Microsoft.CloudTest/hostedpools`, `Microsoft.CloudTest/images`, `Microsoft.CloudTest/pools`, `Microsoft.Codespaces/plans`, `Microsoft.ContainerInstance/containerGroups`, `Microsoft.ContainerService/managedClusters`, `Microsoft.ContainerService/TestClients`, `Microsoft.Databricks/workspaces`, `Microsoft.DBforMySQL/flexibleServers`, `Microsoft.DBforMySQL/servers`, `Microsoft.DBforMySQL/serversv2`, `Microsoft.DBforPostgreSQL/flexibleServers`, `Microsoft.DBforPostgreSQL/serversv2`, `Microsoft.DBforPostgreSQL/singleServers`, `Microsoft.DelegatedNetwork/controller`, `Microsoft.DevCenter/networkConnection`, `Microsoft.DevOpsInfrastructure/pools`, `Microsoft.DocumentDB/cassandraClusters`, `Microsoft.Fidalgo/networkSettings`, `Microsoft.HardwareSecurityModules/dedicatedHSMs`, `Microsoft.Kusto/clusters`, `Microsoft.LabServices/labplans`, `Microsoft.Logic/integrationServiceEnvironments`, `Microsoft.MachineLearningServices/workspaces`, `Microsoft.Netapp/volumes`, `Microsoft.Network/applicationGateways`, `Microsoft.Network/dnsResolvers`, `Microsoft.Network/managedResolvers`, `Microsoft.Network/fpgaNetworkInterfaces`, `Microsoft.Network/networkWatchers.`, `Microsoft.Network/virtualNetworkGateways`, `Microsoft.Orbital/orbitalGateways`, `Microsoft.PowerAutomate/hostedRpa`, `Microsoft.PowerPlatform/enterprisePolicies`, `Microsoft.PowerPlatform/vnetaccesslinks`, `Microsoft.ServiceFabricMesh/networks`, `Microsoft.ServiceNetworking/trafficControllers`, `Microsoft.Singularity/accounts/networks`, `Microsoft.Singularity/accounts/npu`, `Microsoft.Sql/managedInstances`, `Microsoft.Sql/managedInstancesOnebox`, `Microsoft.Sql/managedInstancesStage`, `Microsoft.Sql/managedInstancesTest`, `Microsoft.Sql/servers`, `Microsoft.StoragePool/diskPools`, `Microsoft.StreamAnalytics/streamingJobs`, `Microsoft.Synapse/workspaces`, `Microsoft.Web/hostingEnvironments`, `Microsoft.Web/serverFarms`, `NGINX.NGINXPLUS/nginxDeployments`, `PaloAltoNetworks.Cloudngfw/firewalls`, `PureStorage.Block/storagePools`, `Qumulo.Storage/fileSystems`, and `Oracle.Database/networkAttachments`.
         */
        name: pulumi.Input<string>;
    }
    interface SubnetIpAddressPool {
        /**
         * The list of IP address prefixes allocated to the subnet.
         */
        allocatedIpAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Network Manager IP Address Management (IPAM) Pool.
         */
        id: pulumi.Input<string>;
        /**
         * The number of IP addresses to allocated to the subnet. The value must be a string that represents a positive number, e.g., `"100"`.
         *
         * > **Note:** `numberOfIpAddresses` cannot be decreased.
         */
        numberOfIpAddresses: pulumi.Input<string>;
    }
    interface SubnetServiceEndpointStoragePolicyDefinition {
        /**
         * The description of this Subnet Service Endpoint Storage Policy Definition.
         */
        description?: pulumi.Input<string>;
        /**
         * The name which should be used for this Subnet Service Endpoint Storage Policy Definition.
         */
        name: pulumi.Input<string>;
        /**
         * The type of service resources. Valid values are `Microsoft.Storage` or `Global`. When the `serviceResources` property contains resource IDs, this property must be `Microsoft.Storage`. When the `serviceResources` property contains Aliases, this property must be `Global`. Defaults to `Microsoft.Storage`.
         */
        service?: pulumi.Input<string>;
        /**
         * Specifies a list of resources or aliases that this Subnet Service Endpoint Storage Policy Definition applies to.
         *
         * > **Note:** The `serviceResources` property must contain either Aliases or Resource IDs, but not both.
         */
        serviceResources: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface TrafficManagerAzureEndpointCustomHeader {
        /**
         * The name of the custom header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of custom header. Applicable for HTTP and HTTPS protocol.
         */
        value: pulumi.Input<string>;
    }
    interface TrafficManagerAzureEndpointSubnet {
        /**
         * The first IP Address in this subnet.
         */
        first: pulumi.Input<string>;
        /**
         * The last IP Address in this subnet.
         */
        last?: pulumi.Input<string>;
        /**
         * The block size (number of leading bits in the subnet mask).
         */
        scope?: pulumi.Input<number>;
    }
    interface TrafficManagerExternalEndpointCustomHeader {
        /**
         * The name of the custom header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of custom header. Applicable for HTTP and HTTPS protocol.
         */
        value: pulumi.Input<string>;
    }
    interface TrafficManagerExternalEndpointSubnet {
        /**
         * The first IP Address in this subnet.
         */
        first: pulumi.Input<string>;
        /**
         * The last IP Address in this subnet.
         */
        last?: pulumi.Input<string>;
        /**
         * The block size (number of leading bits in the subnet mask).
         */
        scope?: pulumi.Input<number>;
    }
    interface TrafficManagerNestedEndpointCustomHeader {
        /**
         * The name of the custom header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of custom header. Applicable for HTTP and HTTPS protocol.
         */
        value: pulumi.Input<string>;
    }
    interface TrafficManagerNestedEndpointSubnet {
        /**
         * The first IP Address in this subnet.
         */
        first: pulumi.Input<string>;
        /**
         * The last IP Address in this subnet.
         */
        last?: pulumi.Input<string>;
        /**
         * The block size (number of leading bits in the subnet mask).
         */
        scope?: pulumi.Input<number>;
    }
    interface TrafficManagerProfileDnsConfig {
        /**
         * The relative domain name, this is combined with the domain name used by Traffic Manager to form the FQDN which is exported as documented below. Changing this forces a new resource to be created.
         */
        relativeName: pulumi.Input<string>;
        /**
         * The TTL value of the Profile used by Local DNS resolvers and clients.
         */
        ttl: pulumi.Input<number>;
    }
    interface TrafficManagerProfileMonitorConfig {
        /**
         * One or more `customHeader` blocks as defined below.
         */
        customHeaders?: pulumi.Input<pulumi.Input<inputs.network.TrafficManagerProfileMonitorConfigCustomHeader>[]>;
        /**
         * A list of status code ranges in the format of `100-101`.
         */
        expectedStatusCodeRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The interval used to check the endpoint health from a Traffic Manager probing agent. You can specify two values here: `30` (normal probing) and `10` (fast probing). The default value is `30`.
         */
        intervalInSeconds?: pulumi.Input<number>;
        /**
         * The path used by the monitoring checks. Required when `protocol` is set to `HTTP` or `HTTPS` - cannot be set when `protocol` is set to `TCP`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number used by the monitoring checks.
         */
        port: pulumi.Input<number>;
        /**
         * The protocol used by the monitoring checks, supported values are `HTTP`, `HTTPS` and `TCP`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The amount of time the Traffic Manager probing agent should wait before considering that check a failure when a health check probe is sent to the endpoint. If `intervalInSeconds` is set to `30`, then `timeoutInSeconds` can be between `5` and `10`. The default value is `10`. If `intervalInSeconds` is set to `10`, then valid values are between `5` and `9` and `timeoutInSeconds` is required.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * The number of failures a Traffic Manager probing agent tolerates before marking that endpoint as unhealthy. Valid values are between `0` and `9`. The default value is `3`
         */
        toleratedNumberOfFailures?: pulumi.Input<number>;
    }
    interface TrafficManagerProfileMonitorConfigCustomHeader {
        /**
         * The name of the custom header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of custom header. Applicable for HTTP and HTTPS protocol.
         */
        value: pulumi.Input<string>;
    }
    interface VirtualHubConnectionRouting {
        /**
         * The ID of the route table associated with this Virtual Hub connection.
         */
        associatedRouteTableId?: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for inbound learned routes.
         */
        inboundRouteMapId?: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for outbound advertised routes.
         */
        outboundRouteMapId?: pulumi.Input<string>;
        /**
         * A `propagatedRouteTable` block as defined below.
         */
        propagatedRouteTable?: pulumi.Input<inputs.network.VirtualHubConnectionRoutingPropagatedRouteTable>;
        /**
         * The static VNet local route override criteria that is used to determine whether NVA in spoke VNet is bypassed for traffic with destination in spoke VNet. Possible values are `Contains` and `Equal`. Defaults to `Contains`. Changing this forces a new resource to be created.
         */
        staticVnetLocalRouteOverrideCriteria?: pulumi.Input<string>;
        /**
         * Whether the static routes should be propagated to the Virtual Hub. Defaults to `true`.
         */
        staticVnetPropagateStaticRoutesEnabled?: pulumi.Input<boolean>;
        /**
         * A `staticVnetRoute` block as defined below.
         */
        staticVnetRoutes?: pulumi.Input<pulumi.Input<inputs.network.VirtualHubConnectionRoutingStaticVnetRoute>[]>;
    }
    interface VirtualHubConnectionRoutingPropagatedRouteTable {
        /**
         * The list of labels to assign to this route table.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Route Table IDs to associated with this Virtual Hub Connection.
         */
        routeTableIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualHubConnectionRoutingStaticVnetRoute {
        /**
         * A list of CIDR Ranges which should be used as Address Prefixes.
         */
        addressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name which should be used for this Static Route.
         */
        name?: pulumi.Input<string>;
        /**
         * The IP Address which should be used for the Next Hop.
         */
        nextHopIpAddress?: pulumi.Input<string>;
    }
    interface VirtualHubRoute {
        /**
         * A list of Address Prefixes.
         */
        addressPrefixes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The IP Address that Packets should be forwarded to as the Next Hop.
         */
        nextHopIpAddress: pulumi.Input<string>;
    }
    interface VirtualHubRouteTableRoute {
        /**
         * A list of destination addresses for this route.
         */
        destinations: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of destinations. Possible values are `CIDR`, `ResourceId` and `Service`.
         */
        destinationsType: pulumi.Input<string>;
        /**
         * The name which should be used for this route.
         */
        name: pulumi.Input<string>;
        /**
         * The next hop's resource ID.
         */
        nextHop: pulumi.Input<string>;
        /**
         * The type of next hop. Currently the only possible value is `ResourceId`. Defaults to `ResourceId`.
         *
         * > **Note:** The Routes can alternatively be created using the virtualHubRouteTableRoute resource. Using both inline and external routes is not supported and may result in unexpected configuration.
         */
        nextHopType?: pulumi.Input<string>;
    }
    interface VirtualNetworkDdosProtectionPlan {
        /**
         * Enable/disable DDoS Protection Plan on Virtual Network.
         */
        enable: pulumi.Input<boolean>;
        /**
         * The ID of DDoS Protection Plan.
         */
        id: pulumi.Input<string>;
    }
    interface VirtualNetworkEncryption {
        /**
         * Specifies if the encrypted Virtual Network allows VM that does not support encryption. Possible values are `DropUnencrypted` and `AllowUnencrypted`.
         *
         * > **Note:** Currently `AllowUnencrypted` is the only supported value for the `enforcement` property as `DropUnencrypted` is not yet in public preview or general availability. Please see the [official documentation](https://learn.microsoft.com/en-us/azure/virtual-network/virtual-network-encryption-overview#limitations) for more information.
         */
        enforcement: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayBgpSettings {
        /**
         * The Autonomous System Number (ASN) to use as part of the BGP.
         */
        asn?: pulumi.Input<number>;
        /**
         * The weight added to routes which have been learned through BGP peering. Valid values can be between `0` and `100`.
         */
        peerWeight?: pulumi.Input<number>;
        /**
         * A list of `peeringAddresses` blocks as defined below. Only one `peeringAddresses` block can be specified except when `activeActive` of this Virtual Network Gateway is `true`.
         */
        peeringAddresses?: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayBgpSettingsPeeringAddress>[]>;
    }
    interface VirtualNetworkGatewayBgpSettingsPeeringAddress {
        /**
         * A list of Azure custom APIPA addresses assigned to the BGP peer of the Virtual Network Gateway.
         *
         * > **Note:** The valid range for the reserved APIPA address in Azure Public is from `169.254.21.0` to `169.254.22.255`.
         */
        apipaAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of peering address assigned to the BGP peer of the Virtual Network Gateway.
         */
        defaultAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the IP configuration of this Virtual Network Gateway. In case there are multiple `ipConfiguration` blocks defined, this property is **required** to specify.
         */
        ipConfigurationName?: pulumi.Input<string>;
        /**
         * A list of tunnel IP addresses assigned to the BGP peer of the Virtual Network Gateway.
         */
        tunnelIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkGatewayConnectionCustomBgpAddresses {
        /**
         * single IP address that is part of the `azure.network.VirtualNetworkGateway` ipConfiguration (first one)
         */
        primary: pulumi.Input<string>;
        /**
         * single IP address that is part of the `azure.network.VirtualNetworkGateway` ipConfiguration (second one)
         */
        secondary?: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayConnectionIpsecPolicy {
        /**
         * The DH group used in IKE phase 1 for initial SA. Valid options are `DHGroup1`, `DHGroup14`, `DHGroup2`, `DHGroup2048`, `DHGroup24`, `ECP256`, `ECP384`, or `None`.
         */
        dhGroup: pulumi.Input<string>;
        /**
         * The IKE encryption algorithm. Valid options are `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128`, or `GCMAES256`.
         */
        ikeEncryption: pulumi.Input<string>;
        /**
         * The IKE integrity algorithm. Valid options are `GCMAES128`, `GCMAES256`, `MD5`, `SHA1`, `SHA256`, or `SHA384`.
         */
        ikeIntegrity: pulumi.Input<string>;
        /**
         * The IPSec encryption algorithm. Valid options are `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128`, `GCMAES192`, `GCMAES256`, or `None`.
         */
        ipsecEncryption: pulumi.Input<string>;
        /**
         * The IPSec integrity algorithm. Valid options are `GCMAES128`, `GCMAES192`, `GCMAES256`, `MD5`, `SHA1`, or `SHA256`.
         */
        ipsecIntegrity: pulumi.Input<string>;
        /**
         * The DH group used in IKE phase 2 for new child SA.
         * Valid options are `ECP256`, `ECP384`, `PFS1`, `PFS14`, `PFS2`, `PFS2048`, `PFS24`, `PFSMM`,
         * or `None`.
         */
        pfsGroup: pulumi.Input<string>;
        /**
         * The IPSec SA payload size in KB. Must be at least `1024` KB. Defaults to `102400000` KB.
         */
        saDatasize?: pulumi.Input<number>;
        /**
         * The IPSec SA lifetime in seconds. Must be at least `300` seconds. Defaults to `27000` seconds.
         */
        saLifetime?: pulumi.Input<number>;
    }
    interface VirtualNetworkGatewayConnectionTrafficSelectorPolicy {
        /**
         * List of local CIDRs.
         */
        localAddressCidrs: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of remote CIDRs.
         */
        remoteAddressCidrs: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkGatewayCustomRoute {
        /**
         * A list of address blocks reserved for this virtual network in CIDR notation.
         */
        addressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkGatewayIpConfiguration {
        /**
         * A user-defined name of the IP configuration. Defaults to `vnetGatewayConfig`.
         */
        name?: pulumi.Input<string>;
        /**
         * Defines how the private IP address of the gateways virtual interface is assigned. The only valid value is `Dynamic` for Virtual Network Gateway (`Static` is not supported by the service yet). Defaults to `Dynamic`.
         */
        privateIpAddressAllocation?: pulumi.Input<string>;
        /**
         * The ID of the public IP address to associate with the Virtual Network Gateway.
         *
         * > **Note:** `publicIpAddressId` should not be specified when `type` is set to `ExpressRoute`.
         */
        publicIpAddressId?: pulumi.Input<string>;
        /**
         * The ID of the gateway subnet of a virtual network in which the virtual network gateway will be created. It is mandatory that the associated subnet is named `GatewaySubnet`. Therefore, each virtual network can contain at most a single Virtual Network Gateway.
         */
        subnetId: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayNatRuleExternalMapping {
        /**
         * The string CIDR representing the address space for the Virtual Network Gateway Nat Rule external mapping.
         */
        addressSpace: pulumi.Input<string>;
        /**
         * The single port range for the Virtual Network Gateway Nat Rule external mapping.
         */
        portRange?: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayNatRuleInternalMapping {
        /**
         * The string CIDR representing the address space for the Virtual Network Gateway Nat Rule internal mapping.
         */
        addressSpace: pulumi.Input<string>;
        /**
         * The single port range for the Virtual Network Gateway Nat Rule internal mapping.
         */
        portRange?: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayPolicyGroup {
        /**
         * Is this a Default Virtual Network Gateway Policy Group? Defaults to `false`.
         */
        isDefault?: pulumi.Input<boolean>;
        /**
         * The name of the Virtual Network Gateway Policy Group.
         */
        name: pulumi.Input<string>;
        /**
         * One or more `policyMember` blocks as defined below.
         */
        policyMembers: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayPolicyGroupPolicyMember>[]>;
        /**
         * The priority for the Virtual Network Gateway Policy Group. Defaults to `0`.
         */
        priority?: pulumi.Input<number>;
    }
    interface VirtualNetworkGatewayPolicyGroupPolicyMember {
        /**
         * The name of the Virtual Network Gateway Policy Group Member.
         */
        name: pulumi.Input<string>;
        /**
         * The VPN Policy Member attribute type. Possible values are `AADGroupId`, `CertificateGroupId` and `RadiusAzureGroupId`.
         */
        type: pulumi.Input<string>;
        /**
         * The value of attribute that is used for this Virtual Network Gateway Policy Group Member.
         */
        value: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayVpnClientConfiguration {
        /**
         * The client id of the Azure VPN application.
         * See [Create an Active Directory (AD) tenant for P2S OpenVPN protocol connections](https://docs.microsoft.com/en-gb/azure/vpn-gateway/openvpn-azure-ad-tenant-multi-app) for values
         */
        aadAudience?: pulumi.Input<string>;
        /**
         * The STS url for your tenant
         */
        aadIssuer?: pulumi.Input<string>;
        /**
         * AzureAD Tenant URL
         */
        aadTenant?: pulumi.Input<string>;
        /**
         * The address space out of which IP addresses for vpn clients will be taken. You can provide more than one address space, e.g. in CIDR notation.
         */
        addressSpaces: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * An `ipsecPolicy` block as defined below.
         */
        ipsecPolicy?: pulumi.Input<inputs.network.VirtualNetworkGatewayVpnClientConfigurationIpsecPolicy>;
        /**
         * The address of the Radius server.
         */
        radiusServerAddress?: pulumi.Input<string>;
        /**
         * The secret used by the Radius server.
         */
        radiusServerSecret?: pulumi.Input<string>;
        /**
         * One or more `radiusServer` blocks as defined below.
         */
        radiusServers?: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayVpnClientConfigurationRadiusServer>[]>;
        /**
         * One or more `revokedCertificate` blocks which are defined below.
         */
        revokedCertificates?: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayVpnClientConfigurationRevokedCertificate>[]>;
        /**
         * One or more `rootCertificate` blocks which are defined below. These root certificates are used to sign the client certificate used by the VPN clients to connect to the gateway.
         */
        rootCertificates?: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayVpnClientConfigurationRootCertificate>[]>;
        /**
         * One or more `virtualNetworkGatewayClientConnection` blocks as defined below.
         */
        virtualNetworkGatewayClientConnections?: pulumi.Input<pulumi.Input<inputs.network.VirtualNetworkGatewayVpnClientConfigurationVirtualNetworkGatewayClientConnection>[]>;
        /**
         * List of the vpn authentication types for the virtual network gateway.
         * The supported values are `AAD`, `Radius` and `Certificate`.
         *
         * > **Note:** `vpnAuthTypes` must be set when using multiple vpn authentication types.
         */
        vpnAuthTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * List of the protocols supported by the vpn client.
         * The supported values are `SSTP`, `IkeV2` and `OpenVPN`.
         * Values `SSTP` and `IkeV2` are incompatible with the use of
         * `aadTenant`, `aadAudience` and `aadIssuer`.
         */
        vpnClientProtocols?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkGatewayVpnClientConfigurationIpsecPolicy {
        /**
         * The DH Group, used in IKE Phase 1. Possible values are `DHGroup1`, `DHGroup2`, `DHGroup14`, `DHGroup24`, `DHGroup2048`, `ECP256`, `ECP384` and `None`.
         */
        dhGroup: pulumi.Input<string>;
        /**
         * The IKE encryption algorithm, used for IKE Phase 2. Possible values are `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128` and `GCMAES256`.
         */
        ikeEncryption: pulumi.Input<string>;
        /**
         * The IKE encryption integrity algorithm, used for IKE Phase 2. Possible values are `GCMAES128`, `GCMAES256`, `MD5`, `SHA1`, `SHA256` and `SHA384`.
         */
        ikeIntegrity: pulumi.Input<string>;
        /**
         * The IPSec encryption algorithm, used for IKE phase 1. Possible values are `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128`, `GCMAES192`, `GCMAES256` and `None`.
         */
        ipsecEncryption: pulumi.Input<string>;
        /**
         * The IPSec integrity algorithm, used for IKE phase 1. Possible values are `GCMAES128`, `GCMAES192`, `GCMAES256`, `MD5`, `SHA1` and `SHA256`.
         */
        ipsecIntegrity: pulumi.Input<string>;
        /**
         * The Pfs Group, used in IKE Phase 2. Possible values are `ECP256`, `ECP384`, `PFS1`, `PFS2`, `PFS14`, `PFS24`, `PFS2048`, `PFSMM` and `None`.
         */
        pfsGroup: pulumi.Input<string>;
        /**
         * The IPSec Security Association payload size in KB for a Site-to-Site VPN tunnel. Possible values are between `1024` and `2147483647`.
         */
        saDataSizeInKilobytes: pulumi.Input<number>;
        /**
         * The IPSec Security Association lifetime in seconds for a Site-to-Site VPN tunnel. Possible values are between `300` and `172799`.
         */
        saLifetimeInSeconds: pulumi.Input<number>;
    }
    interface VirtualNetworkGatewayVpnClientConfigurationRadiusServer {
        /**
         * The address of the Radius Server.
         */
        address: pulumi.Input<string>;
        /**
         * The score of the Radius Server determines the priority of the server. Possible values are between `1` and `30`.
         */
        score: pulumi.Input<number>;
        /**
         * The secret that is used to communicate with the Radius Server.
         */
        secret: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayVpnClientConfigurationRevokedCertificate {
        /**
         * Specifies the name of the certificate resource.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the public data of the certificate.
         */
        thumbprint: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayVpnClientConfigurationRootCertificate {
        /**
         * A user-defined name of the root certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The public certificate of the root certificate authority. The certificate must be provided in Base-64 encoded X.509 format (PEM). In particular, this argument *must not* include the `-----BEGIN CERTIFICATE-----` or `-----END CERTIFICATE-----` markers, nor any newlines.
         */
        publicCertData: pulumi.Input<string>;
    }
    interface VirtualNetworkGatewayVpnClientConfigurationVirtualNetworkGatewayClientConnection {
        /**
         * A list of address prefixes for P2S VPN Client.
         */
        addressPrefixes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Virtual Network Gateway Client Connection.
         */
        name: pulumi.Input<string>;
        /**
         * A list of names of Virtual Network Gateway Policy Groups.
         */
        policyGroupNames: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkIpAddressPool {
        /**
         * The list of IP address prefixes allocated to the Virtual Network.
         */
        allocatedIpAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Network Manager IP Address Management (IPAM) Pool.
         */
        id: pulumi.Input<string>;
        /**
         * The number of IP addresses to allocated to the Virtual Network. The value must be a string that represents a positive number, e.g., `"100"`.
         *
         * > **Note:** `numberOfIpAddresses` cannot be decreased.
         */
        numberOfIpAddresses: pulumi.Input<string>;
    }
    interface VirtualNetworkSubnet {
        /**
         * The address prefixes to use for the subnet.
         */
        addressPrefixes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Enable default outbound access to the internet for the subnet. Defaults to `true`.
         */
        defaultOutboundAccessEnabled?: pulumi.Input<boolean>;
        /**
         * One or more `delegation` blocks as defined below.
         */
        delegation?: pulumi.Input<inputs.network.VirtualNetworkSubnetDelegation>;
        /**
         * The ID of this subnet.
         */
        id?: pulumi.Input<string>;
        /**
         * The name of the subnet.
         */
        name: pulumi.Input<string>;
        /**
         * Enable or Disable network policies for the private endpoint on the subnet. Possible values are `Disabled`, `Enabled`, `NetworkSecurityGroupEnabled` and `RouteTableEnabled`. Defaults to `Disabled`.
         *
         * > **Note:** If you don't want to use network policies like user-defined Routes and Network Security Groups, you need to set `privateEndpointNetworkPolicies` in the subnet to `Disabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
         *
         * > **Note:** If you want to use network policies like user-defined Routes and Network Security Groups, you need to set the `privateEndpointNetworkPolicies` in the Subnet to `Enabled`/`NetworkSecurityGroupEnabled`/`RouteTableEnabled`. This setting only applies to Private Endpoints in the Subnet and affects all Private Endpoints in the Subnet.
         *
         * > **Note:** See more details from [Manage network policies for Private Endpoints](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-endpoint-network-policy?tabs=network-policy-portal).
         */
        privateEndpointNetworkPolicies?: pulumi.Input<string>;
        /**
         * Enable or Disable network policies for the private link service on the subnet. Defaults to `true`.
         *
         * > **Note:** When configuring Azure Private Link service, the explicit setting `privateLinkServiceNetworkPoliciesEnabled` must be set to `false` in the subnet since Private Link Service does not support network policies like user-defined Routes and Network Security Groups. This setting only affects the Private Link service. For other resources in the subnet, access is controlled based on the Network Security Group which can be configured using the `azure.network.SubnetNetworkSecurityGroupAssociation` resource. See more details from [Manage network policies for Private Link Services](https://learn.microsoft.com/en-gb/azure/private-link/disable-private-link-service-network-policy?tabs=private-link-network-policy-powershell).
         */
        privateLinkServiceNetworkPoliciesEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the Route Table that should be associated with this subnet.
         *
         * > **Note:** If you declare the subnet inline inside `azure.network.VirtualNetwork`, set `routeTableId` in that `subnet` block — do not also create an `azure.network.SubnetRouteTableAssociation` for the same subnet. The association resource is for when you manage the subnet as a separate `azure.network.Subnet` resource.
         */
        routeTableId?: pulumi.Input<string>;
        /**
         * The Network Security Group to associate with the subnet. (Referenced by `id`, ie. `azurerm_network_security_group.example.id`)
         */
        securityGroup?: pulumi.Input<string>;
        /**
         * The list of IDs of Service Endpoint Policies to associate with the subnet.
         */
        serviceEndpointPolicyIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of Service endpoints to associate with the subnet. Possible values include: `Microsoft.AzureActiveDirectory`, `Microsoft.AzureCosmosDB`, `Microsoft.ContainerRegistry`, `Microsoft.EventHub`, `Microsoft.KeyVault`, `Microsoft.ServiceBus`, `Microsoft.Sql`, `Microsoft.Storage`, `Microsoft.Storage.Global` and `Microsoft.Web`.
         */
        serviceEndpoints?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VirtualNetworkSubnetDelegation {
        /**
         * A name for this delegation.
         */
        name: pulumi.Input<string>;
        /**
         * A `serviceDelegation` block as defined below.
         */
        serviceDelegation: pulumi.Input<inputs.network.VirtualNetworkSubnetDelegationServiceDelegation>;
    }
    interface VirtualNetworkSubnetDelegationServiceDelegation {
        /**
         * A list of Actions which should be delegated. This list is specific to the service to delegate to. Possible values are `Microsoft.Network/networkinterfaces/*`, `Microsoft.Network/publicIPAddresses/join/action`, `Microsoft.Network/publicIPAddresses/read`, `Microsoft.Network/virtualNetworks/read`, `Microsoft.Network/virtualNetworks/subnets/action`, `Microsoft.Network/virtualNetworks/subnets/join/action`, `Microsoft.Network/virtualNetworks/subnets/prepareNetworkPolicies/action`, and `Microsoft.Network/virtualNetworks/subnets/unprepareNetworkPolicies/action`.
         *
         * > **Note:** Azure may add default actions depending on the service delegation name and they can't be changed.
         */
        actions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of service to delegate to. Possible values are `GitHub.Network/networkSettings`, `Informatica.DataManagement/organizations`, `Microsoft.ApiManagement/service`, `Microsoft.Apollo/npu`, `Microsoft.App/environments`, `Microsoft.App/testClients`, `Microsoft.AVS/PrivateClouds`, `Microsoft.AzureCosmosDB/clusters`, `Microsoft.BareMetal/AzureHostedService`, `Microsoft.BareMetal/AzureHPC`, `Microsoft.BareMetal/AzurePaymentHSM`, `Microsoft.BareMetal/AzureVMware`, `Microsoft.BareMetal/CrayServers`, `Microsoft.BareMetal/MonitoringServers`, `Microsoft.Batch/batchAccounts`, `Microsoft.CloudTest/hostedpools`, `Microsoft.CloudTest/images`, `Microsoft.CloudTest/pools`, `Microsoft.Codespaces/plans`, `Microsoft.ContainerInstance/containerGroups`, `Microsoft.ContainerService/managedClusters`, `Microsoft.ContainerService/TestClients`, `Microsoft.Databricks/workspaces`, `Microsoft.DBforMySQL/flexibleServers`, `Microsoft.DBforMySQL/servers`, `Microsoft.DBforMySQL/serversv2`, `Microsoft.DBforPostgreSQL/flexibleServers`, `Microsoft.DBforPostgreSQL/serversv2`, `Microsoft.DBforPostgreSQL/singleServers`, `Microsoft.DelegatedNetwork/controller`, `Microsoft.DevCenter/networkConnection`, `Microsoft.DevOpsInfrastructure/pools`, `Microsoft.DocumentDB/cassandraClusters`, `Microsoft.Fidalgo/networkSettings`, `Microsoft.HardwareSecurityModules/dedicatedHSMs`, `Microsoft.Kusto/clusters`, `Microsoft.LabServices/labplans`, `Microsoft.Logic/integrationServiceEnvironments`, `Microsoft.MachineLearningServices/workspaces`, `Microsoft.Netapp/volumes`, `Microsoft.Network/applicationGateways`, `Microsoft.Network/dnsResolvers`, `Microsoft.Network/managedResolvers`, `Microsoft.Network/fpgaNetworkInterfaces`, `Microsoft.Network/networkWatchers.`, `Microsoft.Network/virtualNetworkGateways`, `Microsoft.Orbital/orbitalGateways`, `Microsoft.PowerAutomate/hostedRpa`, `Microsoft.PowerPlatform/enterprisePolicies`, `Microsoft.PowerPlatform/vnetaccesslinks`, `Microsoft.ServiceFabricMesh/networks`, `Microsoft.ServiceNetworking/trafficControllers`, `Microsoft.Singularity/accounts/networks`, `Microsoft.Singularity/accounts/npu`, `Microsoft.Sql/managedInstances`, `Microsoft.Sql/managedInstancesOnebox`, `Microsoft.Sql/managedInstancesStage`, `Microsoft.Sql/managedInstancesTest`, `Microsoft.Sql/servers`, `Microsoft.StoragePool/diskPools`, `Microsoft.StreamAnalytics/streamingJobs`, `Microsoft.Synapse/workspaces`, `Microsoft.Web/hostingEnvironments`, `Microsoft.Web/serverFarms`, `NGINX.NGINXPLUS/nginxDeployments`, `PaloAltoNetworks.Cloudngfw/firewalls`, `PureStorage.Block/storagePools`, `Qumulo.Storage/fileSystems`, and `Oracle.Database/networkAttachments`.
         */
        name: pulumi.Input<string>;
    }
    interface VnpGatewayNatRuleExternalMapping {
        /**
         * The string CIDR representing the address space for the VPN Gateway Nat Rule external mapping.
         */
        addressSpace: pulumi.Input<string>;
        /**
         * The single port range for the VPN Gateway Nat Rule external mapping.
         */
        portRange?: pulumi.Input<string>;
    }
    interface VnpGatewayNatRuleInternalMapping {
        /**
         * The string CIDR representing the address space for the VPN Gateway Nat Rule internal mapping.
         */
        addressSpace: pulumi.Input<string>;
        /**
         * The single port range for the VPN Gateway Nat Rule internal mapping.
         */
        portRange?: pulumi.Input<string>;
    }
    interface VpnGatewayBgpSettings {
        /**
         * The ASN of the BGP Speaker. Changing this forces a new resource to be created.
         */
        asn: pulumi.Input<number>;
        /**
         * The Address which should be used for the BGP Peering.
         */
        bgpPeeringAddress?: pulumi.Input<string>;
        /**
         * An `instanceBgpPeeringAddress` block as defined below.
         */
        instance0BgpPeeringAddress?: pulumi.Input<inputs.network.VpnGatewayBgpSettingsInstance0BgpPeeringAddress>;
        /**
         * An `instanceBgpPeeringAddress` block as defined below.
         */
        instance1BgpPeeringAddress?: pulumi.Input<inputs.network.VpnGatewayBgpSettingsInstance1BgpPeeringAddress>;
        /**
         * The weight added to Routes learned from this BGP Speaker. Changing this forces a new resource to be created.
         */
        peerWeight: pulumi.Input<number>;
    }
    interface VpnGatewayBgpSettingsInstance0BgpPeeringAddress {
        /**
         * A list of custom BGP peering addresses to assign to this instance.
         */
        customIps: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of default BGP peering addresses which belong to the pre-defined VPN Gateway IP configuration.
         */
        defaultIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The pre-defined id of VPN Gateway IP Configuration.
         */
        ipConfigurationId?: pulumi.Input<string>;
        /**
         * The list of tunnel public IP addresses which belong to the pre-defined VPN Gateway IP configuration.
         */
        tunnelIps?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VpnGatewayBgpSettingsInstance1BgpPeeringAddress {
        /**
         * A list of custom BGP peering addresses to assign to this instance.
         */
        customIps: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The list of default BGP peering addresses which belong to the pre-defined VPN Gateway IP configuration.
         */
        defaultIps?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The pre-defined id of VPN Gateway IP Configuration.
         */
        ipConfigurationId?: pulumi.Input<string>;
        /**
         * The list of tunnel public IP addresses which belong to the pre-defined VPN Gateway IP configuration.
         */
        tunnelIps?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VpnGatewayConnectionRouting {
        /**
         * The ID of the Route Table associated with this VPN Connection.
         */
        associatedRouteTable: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for inbound learned routes.
         */
        inboundRouteMapId?: pulumi.Input<string>;
        /**
         * The resource ID of the Route Map associated with this Routing Configuration for outbound advertised routes.
         */
        outboundRouteMapId?: pulumi.Input<string>;
        /**
         * A `propagatedRouteTable` block as defined below.
         */
        propagatedRouteTable?: pulumi.Input<inputs.network.VpnGatewayConnectionRoutingPropagatedRouteTable>;
    }
    interface VpnGatewayConnectionRoutingPropagatedRouteTable {
        /**
         * A list of labels to assign to this route table.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Route Table IDs to associated with this VPN Gateway Connection.
         */
        routeTableIds: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VpnGatewayConnectionTrafficSelectorPolicy {
        /**
         * A list of local address spaces in CIDR format for this VPN Gateway Connection.
         */
        localAddressRanges: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of remote address spaces in CIDR format for this VPN Gateway Connection.
         */
        remoteAddressRanges: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface VpnGatewayConnectionVpnLink {
        /**
         * The expected connection bandwidth in MBPS. Defaults to `10`.
         */
        bandwidthMbps?: pulumi.Input<number>;
        /**
         * Should the BGP be enabled? Defaults to `false`. Changing this forces a new VPN Gateway Connection to be created.
         */
        bgpEnabled?: pulumi.Input<boolean>;
        /**
         * The connection mode of this VPN Link. Possible values are `Default`, `InitiatorOnly` and `ResponderOnly`. Defaults to `Default`.
         */
        connectionMode?: pulumi.Input<string>;
        /**
         * One or more `customBgpAddress` blocks as defined below.
         */
        customBgpAddresses?: pulumi.Input<pulumi.Input<inputs.network.VpnGatewayConnectionVpnLinkCustomBgpAddress>[]>;
        /**
         * The dead peer detection timeout of this connection in seconds. Possible values are between `9` and `3600`.
         */
        dpdTimeoutSeconds?: pulumi.Input<number>;
        /**
         * A list of the egress NAT Rule Ids.
         */
        egressNatRuleIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of the ingress NAT Rule Ids.
         */
        ingressNatRuleIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `ipsecPolicy` blocks as defined above.
         */
        ipsecPolicies?: pulumi.Input<pulumi.Input<inputs.network.VpnGatewayConnectionVpnLinkIpsecPolicy>[]>;
        /**
         * Whether to use local Azure IP to initiate connection? Defaults to `false`.
         */
        localAzureIpAddressEnabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this VPN Link Connection.
         */
        name: pulumi.Input<string>;
        /**
         * Whether to enable policy-based traffic selectors? Defaults to `false`.
         */
        policyBasedTrafficSelectorEnabled?: pulumi.Input<boolean>;
        /**
         * The protocol used for this VPN Link Connection. Possible values are `IKEv1` and `IKEv2`. Defaults to `IKEv2`.
         */
        protocol?: pulumi.Input<string>;
        /**
         * Should the rate limit be enabled? Defaults to `false`.
         */
        ratelimitEnabled?: pulumi.Input<boolean>;
        /**
         * Routing weight for this VPN Link Connection. Defaults to `0`.
         */
        routeWeight?: pulumi.Input<number>;
        /**
         * SharedKey for this VPN Link Connection.
         */
        sharedKey?: pulumi.Input<string>;
        /**
         * The ID of the connected VPN Site Link. Changing this forces a new VPN Gateway Connection to be created.
         */
        vpnSiteLinkId: pulumi.Input<string>;
    }
    interface VpnGatewayConnectionVpnLinkCustomBgpAddress {
        /**
         * The custom bgp ip address which belongs to the IP Configuration.
         */
        ipAddress: pulumi.Input<string>;
        /**
         * The ID of the IP Configuration which belongs to the VPN Gateway.
         */
        ipConfigurationId: pulumi.Input<string>;
    }
    interface VpnGatewayConnectionVpnLinkIpsecPolicy {
        /**
         * The DH Group used in IKE Phase 1 for initial SA. Possible values are `None`, `DHGroup1`, `DHGroup2`, `DHGroup14`, `DHGroup24`, `DHGroup2048`, `ECP256`, `ECP384`.
         */
        dhGroup: pulumi.Input<string>;
        /**
         * The IPSec encryption algorithm (IKE phase 1). Possible values are `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128`, `GCMAES192`, `GCMAES256`, `None`.
         */
        encryptionAlgorithm: pulumi.Input<string>;
        /**
         * The IKE encryption algorithm (IKE phase 2). Possible values are `DES`, `DES3`, `AES128`, `AES192`, `AES256`, `GCMAES128`, `GCMAES256`.
         */
        ikeEncryptionAlgorithm: pulumi.Input<string>;
        /**
         * The IKE integrity algorithm (IKE phase 2). Possible values are `MD5`, `SHA1`, `SHA256`, `SHA384`, `GCMAES128`, `GCMAES256`.
         */
        ikeIntegrityAlgorithm: pulumi.Input<string>;
        /**
         * The IPSec integrity algorithm (IKE phase 1). Possible values are `MD5`, `SHA1`, `SHA256`, `GCMAES128`, `GCMAES192`, `GCMAES256`.
         */
        integrityAlgorithm: pulumi.Input<string>;
        /**
         * The Pfs Group used in IKE Phase 2 for the new child SA. Possible values are `None`, `PFS1`, `PFS2`, `PFS14`, `PFS24`, `PFS2048`, `PFSMM`, `ECP256`, `ECP384`.
         */
        pfsGroup: pulumi.Input<string>;
        /**
         * The IPSec Security Association (also called Quick Mode or Phase 2 SA) payload size in KB for the site to site VPN tunnel.
         */
        saDataSizeKb: pulumi.Input<number>;
        /**
         * The IPSec Security Association (also called Quick Mode or Phase 2 SA) lifetime in seconds for the site to site VPN tunnel.
         */
        saLifetimeSec: pulumi.Input<number>;
    }
    interface VpnGatewayIpConfiguration {
        /**
         * The identifier of the IP configuration for the VPN Gateway.
         */
        id?: pulumi.Input<string>;
        /**
         * The private IP address of this IP configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The public IP address of this IP configuration.
         */
        publicIpAddress?: pulumi.Input<string>;
    }
    interface VpnServerConfigurationAzureActiveDirectoryAuthentication {
        /**
         * The Audience which should be used for authentication.
         */
        audience: pulumi.Input<string>;
        /**
         * The Issuer which should be used for authentication.
         */
        issuer: pulumi.Input<string>;
        /**
         * The Tenant which should be used for authentication.
         */
        tenant: pulumi.Input<string>;
    }
    interface VpnServerConfigurationClientRevokedCertificate {
        /**
         * A name used to uniquely identify this certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The Thumbprint of the Certificate.
         */
        thumbprint: pulumi.Input<string>;
    }
    interface VpnServerConfigurationClientRootCertificate {
        /**
         * A name used to uniquely identify this certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The Public Key Data associated with the Certificate.
         */
        publicCertData: pulumi.Input<string>;
    }
    interface VpnServerConfigurationIpsecPolicy {
        /**
         * The DH Group, used in IKE Phase 1. Possible values include `DHGroup1`, `DHGroup2`, `DHGroup14`, `DHGroup24`, `DHGroup2048`, `ECP256`, `ECP384` and `None`.
         */
        dhGroup: pulumi.Input<string>;
        /**
         * The IKE encryption algorithm, used for IKE Phase 2. Possible values include `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128` and `GCMAES256`.
         */
        ikeEncryption: pulumi.Input<string>;
        /**
         * The IKE encryption integrity algorithm, used for IKE Phase 2. Possible values include `GCMAES128`, `GCMAES256`, `MD5`, `SHA1`, `SHA256` and `SHA384`.
         */
        ikeIntegrity: pulumi.Input<string>;
        /**
         * The IPSec encryption algorithm, used for IKE phase 1. Possible values include `AES128`, `AES192`, `AES256`, `DES`, `DES3`, `GCMAES128`, `GCMAES192`, `GCMAES256` and `None`.
         */
        ipsecEncryption: pulumi.Input<string>;
        /**
         * The IPSec integrity algorithm, used for IKE phase 1. Possible values include `GCMAES128`, `GCMAES192`, `GCMAES256`, `MD5`, `SHA1` and `SHA256`.
         */
        ipsecIntegrity: pulumi.Input<string>;
        /**
         * The Pfs Group, used in IKE Phase 2. Possible values include `ECP256`, `ECP384`, `PFS1`, `PFS2`, `PFS14`, `PFS24`, `PFS2048`, `PFSMM` and `None`.
         */
        pfsGroup: pulumi.Input<string>;
        /**
         * The IPSec Security Association payload size in KB for a Site-to-Site VPN tunnel.
         */
        saDataSizeKilobytes: pulumi.Input<number>;
        /**
         * The IPSec Security Association lifetime in seconds for a Site-to-Site VPN tunnel.
         */
        saLifetimeSeconds: pulumi.Input<number>;
    }
    interface VpnServerConfigurationPolicyGroupPolicy {
        /**
         * The name of the VPN Server Configuration Policy member.
         */
        name: pulumi.Input<string>;
        /**
         * The attribute type of the VPN Server Configuration Policy member. Possible values are `AADGroupId`, `CertificateGroupId` and `RadiusAzureGroupId`.
         */
        type: pulumi.Input<string>;
        /**
         * The value of the attribute that is used for the VPN Server Configuration Policy member.
         */
        value: pulumi.Input<string>;
    }
    interface VpnServerConfigurationRadius {
        /**
         * One or more `clientRootCertificate` blocks as defined below.
         */
        clientRootCertificates?: pulumi.Input<pulumi.Input<inputs.network.VpnServerConfigurationRadiusClientRootCertificate>[]>;
        /**
         * One or more `serverRootCertificate` blocks as defined below.
         */
        serverRootCertificates?: pulumi.Input<pulumi.Input<inputs.network.VpnServerConfigurationRadiusServerRootCertificate>[]>;
        /**
         * One or more `server` blocks as defined below.
         */
        servers?: pulumi.Input<pulumi.Input<inputs.network.VpnServerConfigurationRadiusServer>[]>;
    }
    interface VpnServerConfigurationRadiusClientRootCertificate {
        /**
         * A name used to uniquely identify this certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The Thumbprint of the Certificate.
         */
        thumbprint: pulumi.Input<string>;
    }
    interface VpnServerConfigurationRadiusServer {
        /**
         * The Address of the Radius Server.
         */
        address: pulumi.Input<string>;
        /**
         * The Score of the Radius Server determines the priority of the server. Ranges from 1 to 30.
         */
        score: pulumi.Input<number>;
        /**
         * The Secret used to communicate with the Radius Server.
         */
        secret: pulumi.Input<string>;
    }
    interface VpnServerConfigurationRadiusServerRootCertificate {
        /**
         * A name used to uniquely identify this certificate.
         */
        name: pulumi.Input<string>;
        /**
         * The Public Key Data associated with the Certificate.
         */
        publicCertData: pulumi.Input<string>;
    }
    interface VpnSiteLink {
        /**
         * A `bgp` block as defined above.
         *
         * > **Note:** The `link.bgp` has to be set when the `addressCidrs` isn't specified.
         */
        bgp?: pulumi.Input<inputs.network.VpnSiteLinkBgp>;
        /**
         * The FQDN of this VPN Site Link.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * The ID of the VPN Site Link.
         */
        id?: pulumi.Input<string>;
        /**
         * The IP address of this VPN Site Link.
         *
         * > **Note:** Either `fqdn` or `ipAddress` should be specified.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name which should be used for this VPN Site Link.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the physical link at the VPN Site. Example: `ATT`, `Verizon`.
         */
        providerName?: pulumi.Input<string>;
        /**
         * The speed of the VPN device at the branch location in unit of mbps. Defaults to `0`.
         */
        speedInMbps?: pulumi.Input<number>;
    }
    interface VpnSiteLinkBgp {
        /**
         * The BGP speaker's ASN.
         */
        asn: pulumi.Input<number>;
        /**
         * The BGP peering IP address.
         */
        peeringAddress: pulumi.Input<string>;
    }
    interface VpnSiteO365Policy {
        /**
         * A `trafficCategory` block as defined above.
         */
        trafficCategory?: pulumi.Input<inputs.network.VpnSiteO365PolicyTrafficCategory>;
    }
    interface VpnSiteO365PolicyTrafficCategory {
        /**
         * Is allow endpoint enabled? The `Allow` endpoint is required for connectivity to specific O365 services and features, but are not as sensitive to network performance and latency as other endpoint types. Defaults to `false`.
         */
        allowEndpointEnabled?: pulumi.Input<boolean>;
        /**
         * Is default endpoint enabled? The `Default` endpoint represents O365 services and dependencies that do not require any optimization, and can be treated by customer networks as normal Internet bound traffic. Defaults to `false`.
         */
        defaultEndpointEnabled?: pulumi.Input<boolean>;
        /**
         * Is optimize endpoint enabled? The `Optimize` endpoint is required for connectivity to every O365 service and represents the O365 scenario that is the most sensitive to network performance, latency, and availability. Defaults to `false`.
         */
        optimizeEndpointEnabled?: pulumi.Input<boolean>;
    }
}
export declare namespace networkfunction {
    interface CollectorPolicyIpfxEmission {
        /**
         * A list of emission destination types. The only possible value is `AzureMonitor`. Changing this forces a new Network Function Collector Policy to be created.
         *
         * > **Note:** Please use the `azure.monitoring.DiagnosticSetting` resource to forward logs to a Log Analytics Workspace.
         */
        destinationTypes: pulumi.Input<string>;
    }
    interface CollectorPolicyIpfxIngestion {
        /**
         * A list of ingestion source resource IDs. Changing this forces a new Network Function Collector Policy to be created.
         */
        sourceResourceIds: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace newrelic {
    interface MonitorIdentity {
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Azure Native New Relic Monitor.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Azure Native New Relic Monitor.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Azure Native New Relic Monitor. The only possible value is `SystemAssigned`. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        type: pulumi.Input<string>;
    }
    interface MonitorPlan {
        /**
         * Specifies the billing cycles. Possible values are `MONTHLY`, `WEEKLY` and `YEARLY`. Defaults to `MONTHLY`. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        billingCycle?: pulumi.Input<string>;
        /**
         * Specifies the date when plan was applied. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        effectiveDate: pulumi.Input<string>;
        /**
         * Specifies the plan id published by NewRelic. The only possible value is `newrelic-pay-as-you-go-free-live`. Defaults to `newrelic-pay-as-you-go-free-live`. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        planId?: pulumi.Input<string>;
        /**
         * Specifies the usage type. Possible values are `COMMITTED` and `PAYG`. Defaults to `PAYG`. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        usageType?: pulumi.Input<string>;
    }
    interface MonitorUser {
        /**
         * Specifies the user Email. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        email: pulumi.Input<string>;
        /**
         * Specifies the first name. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        firstName: pulumi.Input<string>;
        /**
         * Specifies the last name. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        lastName: pulumi.Input<string>;
        /**
         * Specifies the contact phone number. Changing this forces a new Azure Native New Relic Monitor to be created.
         */
        phoneNumber: pulumi.Input<string>;
    }
    interface TagRuleLogTagFilter {
        /**
         * Valid actions for a filtering tag. Possible values are `Exclude` and `Include`. Exclusion takes priority over inclusion.
         */
        action: pulumi.Input<string>;
        /**
         * Specifies the name (also known as the key) of the tag.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the tag.
         */
        value: pulumi.Input<string>;
    }
    interface TagRuleMetricTagFilter {
        /**
         * Valid actions for a filtering tag. Possible values are `Exclude` and `Include`. Exclusion takes priority over inclusion.
         */
        action: pulumi.Input<string>;
        /**
         * Specifies the name (also known as the key) of the tag.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the value of the tag.
         */
        value: pulumi.Input<string>;
    }
}
export declare namespace nginx {
    interface ConfigurationConfigFile {
        /**
         * Specifies the base-64 encoded contents of this config file.
         */
        content: pulumi.Input<string>;
        /**
         * Specifies the path of this config file.
         */
        virtualPath: pulumi.Input<string>;
    }
    interface ConfigurationProtectedFile {
        /**
         * Specifies the base-64 encoded contents of this config file (Sensitive).
         */
        content: pulumi.Input<string>;
        /**
         * The hash of the contents of this configuration file prefixed by the algorithm used.
         */
        contentHash?: pulumi.Input<string>;
        /**
         * Specifies the path of this config file.
         */
        virtualPath: pulumi.Input<string>;
    }
    interface DeploymentAutoScaleProfile {
        /**
         * Specify the maximum number of NGINX capacity units for this NGINX Deployment.
         *
         * > **Note:** If you're using autoscaling with deployments created before v4.0, you may need to use Terraform's `ignoreChanges` functionality to ignore changes to the `capacity` field.
         */
        maxCapacity: pulumi.Input<number>;
        /**
         * Specify the minimum number of NGINX capacity units for this NGINX Deployment.
         */
        minCapacity: pulumi.Input<number>;
        /**
         * Specify the name of the autoscaling profile.
         */
        name: pulumi.Input<string>;
    }
    interface DeploymentFrontendPrivate {
        /**
         * Specify the method for allocating the private IP. Possible values are `Static` and `Dynamic`.
         */
        allocationMethod: pulumi.Input<string>;
        /**
         * Specify the private IP Address.
         */
        ipAddress: pulumi.Input<string>;
        /**
         * Specify the Subnet Resource ID for this NGINX Deployment.
         */
        subnetId: pulumi.Input<string>;
    }
    interface DeploymentFrontendPublic {
        /**
         * Specifies a list of Public IP Resource ID to this NGINX Deployment.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DeploymentIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the NGINX Deployment. Possible values are `SystemAssigned`, `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface DeploymentLoggingStorageAccount {
        containerName?: pulumi.Input<string>;
        /**
         * The name which should be used for this NGINX Deployment. Changing this forces a new NGINX Deployment to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface DeploymentNetworkInterface {
        /**
         * Specify The Subnet Resource ID for this NGINX Deployment.
         */
        subnetId: pulumi.Input<string>;
    }
    interface DeploymentWebApplicationFirewall {
        /**
         * Whether WAF is enabled/disabled for this NGINX Deployment.
         */
        activationStateEnabled: pulumi.Input<boolean>;
        /**
         * A `status` block as defined below.
         */
        statuses?: pulumi.Input<pulumi.Input<inputs.nginx.DeploymentWebApplicationFirewallStatus>[]>;
    }
    interface DeploymentWebApplicationFirewallStatus {
        /**
         * One or more `attackSignaturesPackage` blocks as defined below.
         */
        attackSignaturesPackages?: pulumi.Input<pulumi.Input<inputs.nginx.DeploymentWebApplicationFirewallStatusAttackSignaturesPackage>[]>;
        /**
         * One or more `botSignaturesPackage` blocks as defined below.
         */
        botSignaturesPackages?: pulumi.Input<pulumi.Input<inputs.nginx.DeploymentWebApplicationFirewallStatusBotSignaturesPackage>[]>;
        /**
         * One or more `componentVersions` blocks as defined below.
         */
        componentVersions?: pulumi.Input<pulumi.Input<inputs.nginx.DeploymentWebApplicationFirewallStatusComponentVersion>[]>;
        /**
         * One or more `threatCampaignsPackage` blocks as defined below.
         */
        threatCampaignsPackages?: pulumi.Input<pulumi.Input<inputs.nginx.DeploymentWebApplicationFirewallStatusThreatCampaignsPackage>[]>;
    }
    interface DeploymentWebApplicationFirewallStatusAttackSignaturesPackage {
        /**
         * The revision date and time of the threat campaigns package.
         */
        revisionDatetime?: pulumi.Input<string>;
        /**
         * The version of the threat campaigns package.
         */
        version?: pulumi.Input<string>;
    }
    interface DeploymentWebApplicationFirewallStatusBotSignaturesPackage {
        /**
         * The revision date and time of the threat campaigns package.
         */
        revisionDatetime?: pulumi.Input<string>;
        /**
         * The version of the threat campaigns package.
         */
        version?: pulumi.Input<string>;
    }
    interface DeploymentWebApplicationFirewallStatusComponentVersion {
        /**
         * The version of the WAF Engine.
         */
        wafEngineVersion?: pulumi.Input<string>;
        /**
         * The version of the WAF Nginx module.
         */
        wafNginxVersion?: pulumi.Input<string>;
    }
    interface DeploymentWebApplicationFirewallStatusThreatCampaignsPackage {
        /**
         * The revision date and time of the threat campaigns package.
         */
        revisionDatetime?: pulumi.Input<string>;
        /**
         * The version of the threat campaigns package.
         */
        version?: pulumi.Input<string>;
    }
}
export declare namespace notificationhub {
    interface HubApnsCredential {
        /**
         * The Application Mode which defines which server the APNS Messages should be sent to. Possible values are `Production` and `Sandbox`.
         */
        applicationMode: pulumi.Input<string>;
        /**
         * The Bundle ID of the iOS/macOS application to send push notifications for, such as `com.org.example`.
         */
        bundleId: pulumi.Input<string>;
        /**
         * The Apple Push Notifications Service (APNS) Key.
         */
        keyId: pulumi.Input<string>;
        /**
         * The ID of the team the Token.
         */
        teamId: pulumi.Input<string>;
        /**
         * The Push Token associated with the Apple Developer Account. This is the contents of the `key` downloaded from [the Apple Developer Portal](https://developer.apple.com/account/ios/authkey/) between the `-----BEGIN PRIVATE KEY-----` and `-----END PRIVATE KEY-----` blocks.
         */
        token: pulumi.Input<string>;
    }
    interface HubBrowserCredential {
        /**
         * The subject name of web push.
         */
        subject: pulumi.Input<string>;
        /**
         * The Voluntary Application Server Identification (VAPID) private key.
         */
        vapidPrivateKey: pulumi.Input<string>;
        /**
         * The Voluntary Application Server Identification (VAPID) public key.
         */
        vapidPublicKey: pulumi.Input<string>;
    }
    interface HubGcmCredential {
        /**
         * The API Key associated with the Google Cloud Messaging service.
         */
        apiKey: pulumi.Input<string>;
    }
}
export declare namespace operationalinsights {
    interface AnalyticsSolutionPlan {
        name?: pulumi.Input<string>;
        /**
         * The product name of the solution. For example `OMSGallery/Containers`. Changing this forces a new resource to be created.
         */
        product: pulumi.Input<string>;
        /**
         * A promotion code to be used with the solution. Changing this forces a new resource to be created.
         */
        promotionCode?: pulumi.Input<string>;
        /**
         * The publisher of the solution. For example `Microsoft`. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
    }
    interface AnalyticsWorkspaceIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Log Analytics Workspace. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you) and `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field.
         *
         * > **Note:** When `type` is set to `SystemAssigned`, The assigned `principalId` and `tenantId` can be retrieved after the Log Analytics Workspace has been created.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace oracle {
    interface AutonomousDatabaseLongTermBackupSchedule {
        enabled: pulumi.Input<boolean>;
        repeatCadence: pulumi.Input<string>;
        retentionPeriodInDays: pulumi.Input<number>;
        timeOfBackup: pulumi.Input<string>;
    }
    interface CloudVmClusterDataCollectionOptions {
        /**
         * Indicates whether diagnostic collection is enabled for the VM Cluster/Cloud VM Cluster/VMBM DBCS. Enabling diagnostic collection allows you to receive Events service notifications for guest VM issues. Diagnostic collection also allows Oracle to provide enhanced service and proactive support for your Exadata system. You can enable diagnostic collection during VM Cluster/Cloud VM Cluster provisioning. You can also disable or enable it at any time using the `UpdateVmCluster` or `updateCloudVmCluster` API. Changing this forces a new Cloud VM Cluster to be created.
         */
        diagnosticsEventsEnabled?: pulumi.Input<boolean>;
        /**
         * Indicates whether health monitoring is enabled for the VM Cluster / Cloud VM Cluster / VMBM DBCS. Enabling health monitoring allows Oracle to collect diagnostic data and share it with its operations and support personnel. You may also receive notifications for some events. Collecting health diagnostics enables Oracle to provide proactive support and enhanced service for your system. Optionally enable health monitoring while provisioning a system. You can also disable or enable health monitoring anytime using the `UpdateVmCluster`, `UpdateCloudVmCluster` or `updateDbsystem` API. Changing this forces a new Cloud VM Cluster to be created.
         */
        healthMonitoringEnabled?: pulumi.Input<boolean>;
        /**
         * Indicates whether incident logs and trace collection are enabled for the VM Cluster / Cloud VM Cluster / VMBM DBCS. Enabling incident logs collection allows Oracle to receive Events service notifications for guest VM issues, collect incident logs and traces, and use them to diagnose issues and resolve them. Optionally enable incident logs collection while provisioning a system. You can also disable or enable incident logs collection anytime using the `UpdateVmCluster`, `updateCloudVmCluster` or `updateDbsystem` API. Changing this forces a new Cloud VM Cluster to be created.
         */
        incidentLogsEnabled?: pulumi.Input<boolean>;
    }
    interface CloudVmClusterFileSystemConfiguration {
        /**
         * The mount path of the file system.
         */
        mountPoint?: pulumi.Input<string>;
        /**
         * The size of the virtual machine's file system.
         */
        sizeInGb?: pulumi.Input<number>;
    }
    interface ExadataInfrastructureMaintenanceWindow {
        /**
         * Days during the week when maintenance should be performed. Valid values are: `0` - represents time slot `0:00 - 3:59 UTC - 4` - represents time slot `4:00 - 7:59 UTC - 8` - represents time slot 8:00 - 11:59 UTC - 12 - represents time slot 12:00 - 15:59 UTC - 16 - represents time slot 16:00 - 19:59 UTC - 20 - represents time slot `20:00 - 23:59 UTC`. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        daysOfWeeks?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The window of hours during the day when maintenance should be performed. The window is a 4 hour slot. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        hoursOfDays?: pulumi.Input<pulumi.Input<number>[]>;
        /**
         * Lead time window allows user to set a lead time to prepare for a down time. The lead time is in weeks and valid value is between `1` to `4`. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        leadTimeInWeeks?: pulumi.Input<number>;
        /**
         * Months during the year when maintenance should be performed. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        months?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Cloud Exadata Infrastructure node patching method, either `ROLLING` or `NONROLLING`. Default value is `ROLLING`. IMPORTANT: Non-rolling infrastructure patching involves system down time. See [Oracle-Managed Infrastructure Maintenance Updates](https://docs.cloud.oracle.com/iaas/Content/Database/Concepts/examaintenance.htm#Oracle) for more information. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        patchingMode?: pulumi.Input<string>;
        /**
         * The maintenance window scheduling preference. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        preference?: pulumi.Input<string>;
        /**
         * Weeks during the month when maintenance should be performed. Weeks start on the 1st, 8th, 15th, and 22nd days of the month, and have a duration of 7 days. Weeks start and end based on calendar dates, not days of the week. For example, to allow maintenance during the 2nd week of the month (from the 8th day to the 14th day of the month), use the value 2. Maintenance cannot be scheduled for the fifth week of months that contain more than 28 days. Note that this parameter works in conjunction with the daysOfWeek and hoursOfDay parameters to allow you to specify specific days of the week and hours that maintenance will be performed. Changing this forces a new Cloud Exadata Infrastructure to be created.
         */
        weeksOfMonths?: pulumi.Input<pulumi.Input<number>[]>;
    }
    interface ExascaleDatabaseStorageVaultHighCapacityDatabaseStorage {
        /**
         * Available size in gigabytes.
         */
        availableSizeInGb?: pulumi.Input<number>;
        /**
         * Total capacity in gigabytes. Changing this forces a new Exadata Database Storage Vault to be created.
         */
        totalSizeInGb: pulumi.Input<number>;
    }
}
export declare namespace orbital {
    interface ContactProfileLink {
        /**
         * A list of contact profile link channels. A `channels` block as defined below.
         */
        channels: pulumi.Input<pulumi.Input<inputs.orbital.ContactProfileLinkChannel>[]>;
        /**
         * Direction of the link. Possible values are `Uplink` and `Downlink`.
         */
        direction: pulumi.Input<string>;
        /**
         * Name of the link.
         */
        name: pulumi.Input<string>;
        /**
         * Polarization of the link. Possible values are `LHCP`, `RHCP`, `linearVertical` and `linearHorizontal`.
         */
        polarization: pulumi.Input<string>;
    }
    interface ContactProfileLinkChannel {
        /**
         * Bandwidth in MHz.
         */
        bandwidthMhz: pulumi.Input<number>;
        /**
         * Center frequency in MHz.
         */
        centerFrequencyMhz: pulumi.Input<number>;
        /**
         * Copy of the modem configuration file such as Kratos QRadio or Kratos QuantumRx. Only valid for downlink directions. If provided, the modem connects to the customer endpoint and sends demodulated data instead of a VITA.49 stream.
         */
        demodulationConfiguration?: pulumi.Input<string>;
        /**
         * Customer End point to store/retrieve data during a contact. An `endPoint` block as defined below.
         */
        endPoints: pulumi.Input<pulumi.Input<inputs.orbital.ContactProfileLinkChannelEndPoint>[]>;
        /**
         * Copy of the modem configuration file such as Kratos QRadio. Only valid for uplink directions. If provided, the modem connects to the customer endpoint and accepts commands from the customer instead of a VITA.49 stream.
         */
        modulationConfiguration?: pulumi.Input<string>;
        /**
         * Name of the channel.
         */
        name: pulumi.Input<string>;
    }
    interface ContactProfileLinkChannelEndPoint {
        /**
         * Name of an end point.
         */
        endPointName: pulumi.Input<string>;
        /**
         * IP address of an end point.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * TCP port to listen on to receive data.
         */
        port: pulumi.Input<string>;
        /**
         * Protocol of an end point. Possible values are `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface SpacecraftLink {
        /**
         * Bandwidth in Mhz.
         */
        bandwidthMhz: pulumi.Input<number>;
        /**
         * Center frequency in Mhz.
         *
         * > **Note:** The value of `centerFrequencyMhz +/- bandwidthMhz / 2` should fall in one of these ranges: `Uplink/LHCP`: [2025, 2120]; `Uplink/Linear`: [399, 403],[435, 438],[449, 451]; `Uplink/RHCP`: [399, 403],[435, 438],[449, 451],[2025, 2120]; `Downlink/LHCP`: [2200, 2300], [7500, 8400]; `Downlink/Linear`: [399, 403], [435, 438], [449, 451]; Downlink/Linear`: [399, 403], [435, 438], [449, 451], [2200, 2300], [7500, 8400]
         */
        centerFrequencyMhz: pulumi.Input<number>;
        /**
         * Direction if the communication. Possible values are `Uplink` and `Downlink`.
         */
        direction: pulumi.Input<string>;
        /**
         * Name of the link.
         */
        name: pulumi.Input<string>;
        /**
         * Polarization. Possible values are `RHCP`, `LHCP`, `linearVertical` and `linearHorizontal`.
         */
        polarization: pulumi.Input<string>;
    }
}
export declare namespace paloalto {
    interface LocalRulestackRuleCategory {
        /**
         * Specifies a list of URL categories to match. Possible values include `abortion`, `abused-drugs`, `adult`, `alcohol-and-tobacco`, `auctions`, `business-and-economy`, `command-and-control`, `computer-and-internet-info`, `content-delivery-networks`, `copyright-infringement`, `cryptocurrency`, `dating`, `dynamic-dns`, `educational-institutions`, `entertainment-and-arts`, `extremism`, `financial-services`, `gambling`, `games`, `government`, `grayware`, `hacking`, `health-and-medicine`, `high-risk`, `home-and-garden`, `hunting-and-fishing`, `insufficient-content`, `internet-communications-and-telephony`, `internet-portals`, `job-search`, `legal`, `low-risk`, `malware`, `medium-risk`, `military`, `motor-vehicles`, `music`, `newly-registered-domain`, `news`, `not-resolved`, `nudity`, `online-storage-and-backup`, `parked`, `peer-to-peer`, `personal-sites-and-blogs`, `philosophy-and-political-advocacy`, `phishing`, `private-ip-addresses`, `proxy-avoidance-and-anonymizers`, `questionable`, `real-estate`, `real-time-detection`, `recreation-and-hobbies`, `reference-and-research`, `religion`, `search-engines`, `sex-education`, `shareware-and-freeware`, `shopping`, `social-networking`, `society`, `sports`, `stock-advice-and-tools`, `streaming-media`, `swimsuits-and-intimate-apparel`, `training-and-tools`, `translation`, `travel`, `unknown`, `weapons`, `web-advertisements`, `web-based-email`, and `web-hosting`.
         */
        customUrls: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of feeds to match.
         */
        feeds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LocalRulestackRuleDestination {
        /**
         * Specifies a list of CIDR's.
         */
        cidrs?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of ISO3361-1 Alpha-2 Country codes. Possible values include `AF`, `AX`, `AL`, `DZ`, `AS`, `AD`, `AO`, `AI`, `AQ`, `AG`, `AR`, `AM`, `AW`, `AU`, `AT`, `AZ`, `BS`, `BH`, `BD`, `BB`, `BY`, `BE`, `BZ`, `BJ`, `BM`, `BT`, `BO`, `BQ`, `BA`, `BW`, `BV`, `BR`, `IO`, `BN`, `BG`, `BF`, `BI`, `KH`, `CM`, `CA`, `CV`, `KY`, `CF`, `TD`, `CL`, `CN`, `CX`, `CC`, `CO`, `KM`, `CG`, `CD`, `CK`, `CR`, `CI`, `HR`, `CU`, `CW`, `CY`, `CZ`, `DK`, `DJ`, `DM`, `DO`, `EC`, `EG`, `SV`, `GQ`, `ER`, `EE`, `ET`, `FK`, `FO`, `FJ`, `FI`, `FR`, `GF`, `PF`, `TF`, `GA`, `GM`, `GE`, `DE`, `GH`, `GI`, `GR`, `GL`, `GD`, `GP`, `GU`, `GT`, `GG`, `GN`, `GW`, `GY`, `HT`, `HM`, `VA`, `HN`, `HK`, `HU`, `IS`, `IN`, `ID`, `IR`, `IQ`, `IE`, `IM`, `IL`, `IT`, `JM`, `JP`, `JE`, `JO`, `KZ`, `KE`, `KI`, `KP`, `KR`, `KW`, `KG`, `LA`, `LV`, `LB`, `LS`, `LR`, `LY`, `LI`, `LT`, `LU`, `MO`, `MK`, `MG`, `MW`, `MY`, `MV`, `ML`, `MT`, `MH`, `MQ`, `MR`, `MU`, `YT`, `MX`, `FM`, `MD`, `MC`, `MN`, `ME`, `MS`, `MA`, `MZ`, `MM`, `NA`, `NR`, `NP`, `NL`, `NC`, `NZ`, `NI`, `NE`, `NG`, `NU`, `NF`, `MP`, `NO`, `OM`, `PK`, `PW`, `PS`, `PA`, `PG`, `PY`, `PE`, `PH`, `PN`, `PL`, `PT`, `PR`, `QA`, `RE`, `RO`, `RU`, `RW`, `BL`, `SH`, `KN`, `LC`, `MF`, `PM`, `VC`, `WS`, `SM`, `ST`, `SA`, `SN`, `RS`, `SC`, `SL`, `SG`, `SX`, `SK`, `SI`, `SB`, `SO`, `ZA`, `GS`, `SS`, `ES`, `LK`, `SD`, `SR`, `SJ`, `SZ`, `SE`, `CH`, `SY`, `TW`, `TJ`, `TZ`, `TH`, `TL`, `TG`, `TK`, `TO`, `TT`, `TN`, `TR`, `TM`, `TC`, `TV`, `UG`, `UA`, `AE`, `GB`, `US`, `UM`, `UY`, `UZ`, `VU`, `VE`, `VN`, `VG`, `VI`, `WF`, `EH`, `YE`, `ZM`, `ZW`
         */
        countries?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Feeds.
         */
        feeds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of FQDN lists.
         *
         * > **Note:** This is a list of names of FQDN Lists configured on the same Local Rulestack as this Rule is being created.
         */
        localRulestackFqdnListIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Prefix Lists.
         *
         * > **Note:** This is a list of names of Prefix Lists configured on the same Local Rulestack as this Rule is being created.
         */
        localRulestackPrefixListIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface LocalRulestackRuleSource {
        /**
         * Specifies a list of CIDRs.
         */
        cidrs?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of ISO3361-1 Alpha-2 Country codes. Possible values include `AF`, `AX`, `AL`, `DZ`, `AS`, `AD`, `AO`, `AI`, `AQ`, `AG`, `AR`, `AM`, `AW`, `AU`, `AT`, `AZ`, `BS`, `BH`, `BD`, `BB`, `BY`, `BE`, `BZ`, `BJ`, `BM`, `BT`, `BO`, `BQ`, `BA`, `BW`, `BV`, `BR`, `IO`, `BN`, `BG`, `BF`, `BI`, `KH`, `CM`, `CA`, `CV`, `KY`, `CF`, `TD`, `CL`, `CN`, `CX`, `CC`, `CO`, `KM`, `CG`, `CD`, `CK`, `CR`, `CI`, `HR`, `CU`, `CW`, `CY`, `CZ`, `DK`, `DJ`, `DM`, `DO`, `EC`, `EG`, `SV`, `GQ`, `ER`, `EE`, `ET`, `FK`, `FO`, `FJ`, `FI`, `FR`, `GF`, `PF`, `TF`, `GA`, `GM`, `GE`, `DE`, `GH`, `GI`, `GR`, `GL`, `GD`, `GP`, `GU`, `GT`, `GG`, `GN`, `GW`, `GY`, `HT`, `HM`, `VA`, `HN`, `HK`, `HU`, `IS`, `IN`, `ID`, `IR`, `IQ`, `IE`, `IM`, `IL`, `IT`, `JM`, `JP`, `JE`, `JO`, `KZ`, `KE`, `KI`, `KP`, `KR`, `KW`, `KG`, `LA`, `LV`, `LB`, `LS`, `LR`, `LY`, `LI`, `LT`, `LU`, `MO`, `MK`, `MG`, `MW`, `MY`, `MV`, `ML`, `MT`, `MH`, `MQ`, `MR`, `MU`, `YT`, `MX`, `FM`, `MD`, `MC`, `MN`, `ME`, `MS`, `MA`, `MZ`, `MM`, `NA`, `NR`, `NP`, `NL`, `NC`, `NZ`, `NI`, `NE`, `NG`, `NU`, `NF`, `MP`, `NO`, `OM`, `PK`, `PW`, `PS`, `PA`, `PG`, `PY`, `PE`, `PH`, `PN`, `PL`, `PT`, `PR`, `QA`, `RE`, `RO`, `RU`, `RW`, `BL`, `SH`, `KN`, `LC`, `MF`, `PM`, `VC`, `WS`, `SM`, `ST`, `SA`, `SN`, `RS`, `SC`, `SL`, `SG`, `SX`, `SK`, `SI`, `SB`, `SO`, `ZA`, `GS`, `SS`, `ES`, `LK`, `SD`, `SR`, `SJ`, `SZ`, `SE`, `CH`, `SY`, `TW`, `TJ`, `TZ`, `TH`, `TL`, `TG`, `TK`, `TO`, `TT`, `TN`, `TR`, `TM`, `TC`, `TV`, `UG`, `UA`, `AE`, `GB`, `US`, `UM`, `UY`, `UZ`, `VU`, `VE`, `VN`, `VG`, `VI`, `WF`, `EH`, `YE`, `ZM`, `ZW`
         */
        countries?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Feeds.
         */
        feeds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Prefix Lists.
         *
         * > **Note:** This is a list of names of Prefix Lists configured on the same Local Rulestack as this Rule is being created.
         */
        localRulestackPrefixListIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NextGenerationFirewallVirtualHubLocalRulestackDestinationNat {
        /**
         * A `backendConfig` block as defined above.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubLocalRulestackDestinationNatBackendConfig>;
        /**
         * A `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubLocalRulestackDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this NAT.
         */
        name: pulumi.Input<string>;
        /**
         * The protocol used for this Destination NAT. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubLocalRulestackDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The Public IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubLocalRulestackDestinationNatFrontendConfig {
        /**
         * The port on which traffic will be receiveed.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address resource the traffic will be received on.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubLocalRulestackDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of DNS servers to proxy. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should Azure DNS servers be used? Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualHubLocalRulestackNetworkProfile {
        /**
         * Specifies a list of Public IP IDs to use for Egress NAT.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
         */
        networkVirtualApplianceId: pulumi.Input<string>;
        /**
         * Specifies a list of Public IP IDs to use for this Next Generation Firewall.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        trustedSubnetId?: pulumi.Input<string>;
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
         */
        virtualHubId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaDestinationNat {
        /**
         * A `backendConfig` block as defined above.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig>;
        /**
         * A `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this NAT.
         */
        name: pulumi.Input<string>;
        /**
         * The protocol used for this Destination NAT. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The Public IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaDestinationNatFrontendConfig {
        /**
         * The port on which traffic will be receiveed.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address resource the traffic will be received on.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of DNS servers to proxy. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should Azure DNS servers be used? Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaNetworkProfile {
        /**
         * Specifies a list of Public IP IDs to use for Egress NAT.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
         */
        networkVirtualApplianceId: pulumi.Input<string>;
        /**
         * Specifies a list of Public IP IDs to use for this Next Generation Firewall.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        trustedSubnetId?: pulumi.Input<string>;
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Hub this Next generation Fireall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall VHub Local Rulestack to be created.
         */
        virtualHubId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubPanoramaPanorama {
        deviceGroupName?: pulumi.Input<string>;
        hostName?: pulumi.Input<string>;
        /**
         * The name which should be used for this Palo Alto Next Generation Firewall VHub Panorama. Changing this forces a new Palo Alto Next Generation Firewall VHub Panorama to be created.
         */
        name?: pulumi.Input<string>;
        panoramaServer1?: pulumi.Input<string>;
        panoramaServer2?: pulumi.Input<string>;
        templateName?: pulumi.Input<string>;
        virtualMachineSshKey?: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerDestinationNat {
        /**
         * One or more `backendConfig` block as defined below.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubStrataCloudManagerDestinationNatBackendConfig>;
        /**
         * One or more `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualHubStrataCloudManagerDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this Destination NAT rule.
         */
        name: pulumi.Input<string>;
        /**
         * The protocol used for this Destination NAT. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The public IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerDestinationNatFrontendConfig {
        /**
         * The port on which traffic will be received.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address resource the traffic will be received on.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of DNS servers to use. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should Azure DNS servers be used? Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this App Configuration.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this App Configuration. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualHubStrataCloudManagerNetworkProfile {
        /**
         * A list of Public IP IDs to use for Egress NAT.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Egress NAT IP addresses.
         */
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The IP of trusted subnet for UDR.
         */
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Palo Alto Network Virtual Appliance in the VHub. Changing this forces a new Palo Alto Next Generation Firewall Virtual Hub Strata Cloud Manager to be created.
         */
        networkVirtualApplianceId: pulumi.Input<string>;
        /**
         * A list of Public IP IDs to use for this Next Generation Firewall.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of public IPs associated with this Next Generation Firewall.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of trusted subnet.
         */
        trustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of untrusted subnet.
         */
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Hub this Next Generation Firewall will be deployed in. Changing this forces a new Palo Alto Next Generation Firewall Virtual Hub Strata Cloud Manager to be created.
         */
        virtualHubId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNat {
        /**
         * A `backendConfig` block as defined above.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatBackendConfig>;
        /**
         * A `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this Destination NAT.
         */
        name: pulumi.Input<string>;
        /**
         * The Protocol for this Destination NAT configuration. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackDestinationNatFrontendConfig {
        /**
         * The port on which to receive traffic.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address on which to receive traffic.
         *
         * > **Note:** This must be an Azure Public IP address ID also specified in the `publicIpAddressIds` list.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of DNS servers to use. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the Firewall use Azure Supplied DNS servers. Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfile {
        /**
         * Specifies a list of Azure Public IP Address IDs that can be used for Egress (Source) Network Address Translation.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Azure Public IP Address IDs.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `vnetConfiguration` block as defined below.
         */
        vnetConfiguration: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfiguration>;
    }
    interface NextGenerationFirewallVirtualNetworkLocalRulestackNetworkProfileVnetConfiguration {
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Trust subnet.
         */
        trustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the UnTrust subnet.
         */
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network.
         */
        virtualNetworkId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaDestinationNat {
        /**
         * A `backendConfig` block as defined above.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfig>;
        /**
         * A `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this Destination NAT.
         */
        name: pulumi.Input<string>;
        /**
         * The Protocol for this Destination NAT configuration. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaDestinationNatFrontendConfig {
        /**
         * The port on which to receive traffic.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address on which to receive traffic.
         *
         * > **Note:** This must be an Azure Public IP address ID also specified in the `publicIpAddressIds` list.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of DNS servers to use. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the Firewall use Azure Supplied DNS servers. Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaNetworkProfile {
        /**
         * Specifies a list of Azure Public IP Address IDs that can be used for Egress (Source) Network Address Translation.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of Azure Public IP Address IDs.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `vnetConfiguration` block as defined below.
         */
        vnetConfiguration: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfiguration>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaNetworkProfileVnetConfiguration {
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Trust subnet.
         */
        trustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the UnTrust subnet.
         */
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network.
         */
        virtualNetworkId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkPanoramaPanorama {
        /**
         * The Device Group Name to which this Firewall Resource is registered.
         */
        deviceGroupName?: pulumi.Input<string>;
        /**
         * The Host Name of this Firewall Resource.
         */
        hostName?: pulumi.Input<string>;
        /**
         * The name which should be used for this Palo Alto Next Generation Firewall Virtual Network Panorama. Changing this forces a new Palo Alto Next Generation Firewall Virtual Network Panorama to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The name of the First Panorana server.
         */
        panoramaServer1?: pulumi.Input<string>;
        /**
         * The name of the Second Panorana server.
         */
        panoramaServer2?: pulumi.Input<string>;
        /**
         * The name of the Panorama Template applied to this Firewall Resource.
         */
        templateName?: pulumi.Input<string>;
        /**
         * The SSH Key to connect to the Firewall Resource.
         */
        virtualMachineSshKey?: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNat {
        /**
         * One or more `backendConfig` block as defined below.
         */
        backendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatBackendConfig>;
        /**
         * One or more `frontendConfig` block as defined below.
         */
        frontendConfig?: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatFrontendConfig>;
        /**
         * The name which should be used for this NAT.
         */
        name: pulumi.Input<string>;
        /**
         * The protocol used for this Destination NAT. Possible values include `TCP` and `UDP`.
         */
        protocol: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatBackendConfig {
        /**
         * The port number to send traffic to.
         */
        port: pulumi.Input<number>;
        /**
         * The public IP Address to send the traffic to.
         */
        publicIpAddress: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerDestinationNatFrontendConfig {
        /**
         * The port on which traffic will be received.
         */
        port: pulumi.Input<number>;
        /**
         * The ID of the Public IP Address resource the traffic will be received on.
         */
        publicIpAddressId: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerDnsSettings {
        azureDnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of DNS servers to use. Conflicts with `dns_settings[0].use_azure_dns`.
         */
        dnsServers?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the Firewall use Azure Supplied DNS servers. Conflicts with `dns_settings[0].dns_servers`. Defaults to `false`.
         */
        useAzureDns?: pulumi.Input<boolean>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this App Configuration.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this App Configuration. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfile {
        /**
         * A list of Azure Public IP Address IDs that can be used for Egress (Source) Network Address Translation.
         */
        egressNatIpAddressIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Egress NAT IP addresses.
         */
        egressNatIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Azure Public IP Address IDs.
         */
        publicIpAddressIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of public IPs associated with this Next Generation Firewall.
         */
        publicIpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of trusted ranges to use for the Network.
         */
        trustedAddressRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `vnetConfiguration` block as defined below.
         */
        vnetConfiguration: pulumi.Input<inputs.paloalto.NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfiguration>;
    }
    interface NextGenerationFirewallVirtualNetworkStrataCloudManagerNetworkProfileVnetConfiguration {
        /**
         * The IP of trusted subnet for UDR.
         */
        ipOfTrustForUserDefinedRoutes?: pulumi.Input<string>;
        /**
         * The ID of the Trust subnet.
         */
        trustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the UnTrust subnet.
         */
        untrustedSubnetId?: pulumi.Input<string>;
        /**
         * The ID of the Virtual Network.
         */
        virtualNetworkId: pulumi.Input<string>;
    }
}
export declare namespace pim {
    interface ActiveRoleAssignmentSchedule {
        /**
         * An `expiration` block as defined above.
         */
        expiration?: pulumi.Input<inputs.pim.ActiveRoleAssignmentScheduleExpiration>;
        /**
         * The start date/time of the role assignment. Changing this forces a new resource to be created.
         */
        startDateTime?: pulumi.Input<string>;
    }
    interface ActiveRoleAssignmentScheduleExpiration {
        /**
         * The duration of the role assignment in days. Changing this forces a new resource to be created.
         */
        durationDays?: pulumi.Input<number>;
        /**
         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
         */
        durationHours?: pulumi.Input<number>;
        /**
         * The end date/time of the role assignment. Changing this forces a new resource to be created.
         *
         * > **Note:** Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
         */
        endDateTime?: pulumi.Input<string>;
    }
    interface ActiveRoleAssignmentTicket {
        /**
         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
         */
        number?: pulumi.Input<string>;
        /**
         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
         */
        system?: pulumi.Input<string>;
    }
    interface EligibleRoleAssignmentSchedule {
        /**
         * An `expiration` block as defined above.
         */
        expiration?: pulumi.Input<inputs.pim.EligibleRoleAssignmentScheduleExpiration>;
        /**
         * The start date/time of the role assignment. Changing this forces a new resource to be created.
         */
        startDateTime?: pulumi.Input<string>;
    }
    interface EligibleRoleAssignmentScheduleExpiration {
        /**
         * The duration of the role assignment in days. Changing this forces a new resource to be created.
         */
        durationDays?: pulumi.Input<number>;
        /**
         * The duration of the role assignment in hours. Changing this forces a new resource to be created.
         */
        durationHours?: pulumi.Input<number>;
        /**
         * The end date/time of the role assignment. Changing this forces a new resource to be created.
         *
         * > **Note:** Only one of `durationDays`, `durationHours` or `endDateTime` should be specified.
         */
        endDateTime?: pulumi.Input<string>;
    }
    interface EligibleRoleAssignmentTicket {
        /**
         * User-supplied ticket number to be included with the request. Changing this forces a new resource to be created.
         */
        number?: pulumi.Input<string>;
        /**
         * User-supplied ticket system name to be included with the request. Changing this forces a new resource to be created.
         */
        system?: pulumi.Input<string>;
    }
    interface RoleManagementPolicyActivationRules {
        /**
         * An `approvalStage` block as defined below.
         */
        approvalStage?: pulumi.Input<inputs.pim.RoleManagementPolicyActivationRulesApprovalStage>;
        /**
         * The maximum length of time an activated role can be valid, in an ISO8601 Duration format (e.g. `PT8H`). Valid range is `PT30M` to `PT23H30M`, in 30 minute increments, or `PT1D`. Possible values are `PT30M`, `PT1H`, `PT1H30M`, `PT2H`, `PT2H30M`, `PT3H`, `PT3H30M`, `PT4H`, `PT4H30M`, `PT5H`, `PT5H30M`, `PT6H`, `PT6H30M`, `PT7H`, `PT7H30M`, `PT8H`, `PT8H30M`, `PT9H`, `PT9H30M`, `PT10H`, `PT10H30M`, `PT11H`, `PT11H30M`, `PT12H`, `PT12H30M`, `PT13H`, `PT13H30M`, `PT14H`, `PT14H30M`, `PT15H`, `PT15H30M`, `PT16H`, `PT16H30M`, `PT17H`, `PT17H30M`, `PT18H`, `PT18H30M`, `PT19H`, `PT19H30M`, `PT20H`, `PT20H30M`, `PT21H`, `PT21H30M`, `PT22H`, `PT22H30M`, `PT23H`, `PT23H30M` and `P1D`.
         */
        maximumDuration?: pulumi.Input<string>;
        /**
         * Is approval required for activation. If `true` an `approvalStage` block must be provided.
         */
        requireApproval?: pulumi.Input<boolean>;
        /**
         * Is a justification required during activation of the role.
         */
        requireJustification?: pulumi.Input<boolean>;
        /**
         * Is multi-factor authentication required to activate the role. Conflicts with `requiredConditionalAccessAuthenticationContext`.
         */
        requireMultifactorAuthentication?: pulumi.Input<boolean>;
        /**
         * Is ticket information requrired during activation of the role.
         */
        requireTicketInfo?: pulumi.Input<boolean>;
        /**
         * The Entra ID Conditional Access context that must be present for activation. Conflicts with `requireMultifactorAuthentication`.
         */
        requiredConditionalAccessAuthenticationContext?: pulumi.Input<string>;
    }
    interface RoleManagementPolicyActivationRulesApprovalStage {
        /**
         * One or more `primaryApprover` blocks as defined below.
         */
        primaryApprovers: pulumi.Input<pulumi.Input<inputs.pim.RoleManagementPolicyActivationRulesApprovalStagePrimaryApprover>[]>;
    }
    interface RoleManagementPolicyActivationRulesApprovalStagePrimaryApprover {
        /**
         * The ID of the object which will act as an approver.
         */
        objectId: pulumi.Input<string>;
        /**
         * The type of object acting as an approver. Possible options are `User` and `Group`.
         */
        type: pulumi.Input<string>;
    }
    interface RoleManagementPolicyActiveAssignmentRules {
        /**
         * Must an assignment have an expiry date. `false` allows permanent assignment.
         */
        expirationRequired?: pulumi.Input<boolean>;
        /**
         * The maximum length of time an assignment can be valid, as an ISO8601 duration. Permitted values: `P15D`, `P30D`, `P90D`, `P180D`, or `P365D`.
         */
        expireAfter?: pulumi.Input<string>;
        /**
         * Is a justification required to create new assignments.
         */
        requireJustification?: pulumi.Input<boolean>;
        /**
         * Is multi-factor authentication required to create new assignments.
         */
        requireMultifactorAuthentication?: pulumi.Input<boolean>;
        /**
         * Is ticket information required to create new assignments.
         *
         * One of `expirationRequired` or `expireAfter` must be provided.
         */
        requireTicketInfo?: pulumi.Input<boolean>;
    }
    interface RoleManagementPolicyEligibleAssignmentRules {
        /**
         * Must an assignment have an expiry date. `false` allows permanent assignment.
         */
        expirationRequired?: pulumi.Input<boolean>;
        /**
         * The maximum length of time an assignment can be valid, as an ISO8601 duration. Permitted values: `P15D`, `P30D`, `P90D`, `P180D`, or `P365D`.
         *
         * One of `expirationRequired` or `expireAfter` must be provided.
         */
        expireAfter?: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRules {
        /**
         * A `notificationTarget` block as defined below to configure notfications on active role assignments.
         */
        activeAssignments?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesActiveAssignments>;
        /**
         * A `notificationTarget` block as defined below for configuring notifications on activation of eligible role.
         */
        eligibleActivations?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleActivations>;
        /**
         * A `notificationTarget` block as defined below to configure notification on eligible role assignments.
         */
        eligibleAssignments?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleAssignments>;
    }
    interface RoleManagementPolicyNotificationRulesActiveAssignments {
        /**
         * Admin notification settings
         */
        adminNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesActiveAssignmentsAdminNotifications>;
        /**
         * Approver notification settings
         */
        approverNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesActiveAssignmentsApproverNotifications>;
        /**
         * Assignee notification settings
         */
        assigneeNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesActiveAssignmentsAssigneeNotifications>;
    }
    interface RoleManagementPolicyNotificationRulesActiveAssignmentsAdminNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesActiveAssignmentsApproverNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesActiveAssignmentsAssigneeNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleActivations {
        /**
         * Admin notification settings
         */
        adminNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleActivationsAdminNotifications>;
        /**
         * Approver notification settings
         */
        approverNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleActivationsApproverNotifications>;
        /**
         * Assignee notification settings
         */
        assigneeNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleActivationsAssigneeNotifications>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleActivationsAdminNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleActivationsApproverNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleActivationsAssigneeNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleAssignments {
        /**
         * Admin notification settings
         */
        adminNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleAssignmentsAdminNotifications>;
        /**
         * Approver notification settings
         */
        approverNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleAssignmentsApproverNotifications>;
        /**
         * Assignee notification settings
         */
        assigneeNotifications?: pulumi.Input<inputs.pim.RoleManagementPolicyNotificationRulesEligibleAssignmentsAssigneeNotifications>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleAssignmentsAdminNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleAssignmentsApproverNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
    interface RoleManagementPolicyNotificationRulesEligibleAssignmentsAssigneeNotifications {
        /**
         * The additional recipients to notify
         */
        additionalRecipients?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Whether the default recipients are notified
         */
        defaultRecipients: pulumi.Input<boolean>;
        /**
         * What level of notifications are sent
         */
        notificationLevel: pulumi.Input<string>;
    }
}
export declare namespace policy {
    interface PolicySetDefinitionPolicyDefinitionGroup {
        /**
         * The ID of a resource that contains additional metadata for this Policy Definition Group.
         */
        additionalMetadataResourceId?: pulumi.Input<string>;
        /**
         * The category of this Policy Definition Group.
         */
        category?: pulumi.Input<string>;
        /**
         * The description of this Policy Definition Group.
         */
        description?: pulumi.Input<string>;
        /**
         * The display name of this Policy Definition Group.
         */
        displayName?: pulumi.Input<string>;
        /**
         * The name which should be used for this Policy Definition Group.
         */
        name: pulumi.Input<string>;
    }
    interface PolicySetDefinitionPolicyDefinitionReference {
        /**
         * Parameter values for the references Policy Definition in JSON format.
         */
        parameterValues?: pulumi.Input<string>;
        /**
         * The ID of the Policy Definition to include in this Policy Set Definition.
         */
        policyDefinitionId: pulumi.Input<string>;
        /**
         * Specifies a list of Policy Definition Groups names that this Policy Definition Reference belongs to.
         */
        policyGroupNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A unique ID within this Policy Set Definition for this Policy Definition Reference.
         */
        referenceId?: pulumi.Input<string>;
        /**
         * The version of the Policy Definition to use.
         */
        version?: pulumi.Input<string>;
    }
    interface VirtualMachineConfigurationAssignmentConfiguration {
        /**
         * The assignment type for the Guest Configuration Assignment. Possible values are `Audit`, `ApplyAndAutoCorrect`, `ApplyAndMonitor` and `DeployAndAutoCorrect`.
         */
        assignmentType?: pulumi.Input<string>;
        /**
         * The content hash for the Guest Configuration package.
         *
         * > **Note:** The value for `contentHash` should be the SH256SUM for the zip file in the `contentUri` and must be in upper case.
         */
        contentHash?: pulumi.Input<string>;
        /**
         * The content URI where the Guest Configuration package is stored.
         *
         * > **Note:** When deploying a Custom Guest Configuration package the `contentHash` and `contentUri` fields must be defined. For Built-in Guest Configuration packages, such as the `AzureWindowsBaseline` package, the `contentHash` and `contentUri` should not be defined, rather these fields will be returned after the Built-in Guest Configuration package has been provisioned. For more information on guest configuration assignments please see the [product documentation](https://docs.microsoft.com/azure/governance/policy/concepts/guest-configuration-assignments).
         */
        contentUri?: pulumi.Input<string>;
        /**
         * One or more `parameter` blocks as defined below which define what configuration parameters and values against.
         */
        parameters?: pulumi.Input<pulumi.Input<inputs.policy.VirtualMachineConfigurationAssignmentConfigurationParameter>[]>;
        /**
         * The version of the Guest Configuration that will be assigned in this Guest Configuration Assignment.
         */
        version?: pulumi.Input<string>;
    }
    interface VirtualMachineConfigurationAssignmentConfigurationParameter {
        /**
         * The name of the configuration parameter to check.
         */
        name: pulumi.Input<string>;
        /**
         * The value to check the configuration parameter with.
         */
        value: pulumi.Input<string>;
    }
}
export declare namespace postgresql {
    interface FlexibleServerAuthentication {
        /**
         * Whether Active Directory authentication is allowed to access the PostgreSQL Flexible Server. Defaults to `false`.
         */
        activeDirectoryAuthEnabled?: pulumi.Input<boolean>;
        /**
         * Whether password authentication is allowed to access the PostgreSQL Flexible Server. Defaults to `true`.
         */
        passwordAuthEnabled?: pulumi.Input<boolean>;
        /**
         * The Tenant ID of the Azure Active Directory which is used by the Active Directory authentication. `activeDirectoryAuthEnabled` must be set to `true`.
         *
         * > **Note:** Setting `activeDirectoryAuthEnabled` to `true` requires a Service Principal for the Postgres Flexible Server. For more details see [this document](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-configure-sign-in-azure-ad-authentication).
         *
         * > **Note:** `tenantId` is required when `activeDirectoryAuthEnabled` is set to `true`. And it should not be specified when `activeDirectoryAuthEnabled` is set to `false`
         */
        tenantId?: pulumi.Input<string>;
    }
    interface FlexibleServerCluster {
        /**
         * The default database name to be created. Changing this forces a new PostgreSQL Flexible Server to be created.
         */
        defaultDatabaseName?: pulumi.Input<string>;
        /**
         * The number of nodes in the cluster. Must be at least `1` and no greater than `32`.
         *
         * > **Note:** The maximum supported cluster size is currently 20 nodes. Support for up to 32 nodes will be available in the near future.
         *
         * > **Note:** Cluster support is only available for PostgreSQL version 17 and above, and is not supported when `createMode` is set to anything other than `Default`.
         *
         * > **Note:** The cluster `size` can only be increased, not decreased. Attempting to reduce the cluster size will result in an error.
         */
        size: pulumi.Input<number>;
    }
    interface FlexibleServerCustomerManagedKey {
        /**
         * The versioned/versionless ID of the geo backup Key Vault Key.
         *
         * > **Note:** The key vault in which this key exists must be in the same region as the geo-redundant backup.
         */
        geoBackupKeyVaultKeyId?: pulumi.Input<string>;
        /**
         * The geo backup user managed identity id for a Customer Managed Key. Must be added to `identity.identity_ids`.
         *
         * > **Note:** This managed identity cannot be the same as `primaryUserAssignedIdentityId`, additionally this identity must be created in the same region as the geo-redundant backup.
         *
         * > **Note:** `primaryUserAssignedIdentityId` or `geoBackupUserAssignedIdentityId` is required when `type` is set to `UserAssigned`.
         */
        geoBackupUserAssignedIdentityId?: pulumi.Input<string>;
        /**
         * The versioned/versionless ID of the Key Vault Key.
         */
        keyVaultKeyId: pulumi.Input<string>;
        /**
         * Specifies the primary user managed identity id for a Customer Managed Key. Must be added to `identity.identity_ids`.
         */
        primaryUserAssignedIdentityId?: pulumi.Input<string>;
    }
    interface FlexibleServerHighAvailability {
        /**
         * The high availability mode for the PostgreSQL Flexible Server. Possible value are `SameZone` or `ZoneRedundant`.
         */
        mode: pulumi.Input<string>;
        /**
         * Specifies the Availability Zone in which the standby Flexible Server should be located.
         *
         * > **Note:** Azure will automatically assign an Availability Zone if one is not specified. If the PostgreSQL Flexible Server fails-over to the Standby Availability Zone, the `zone` will be updated to reflect the current Primary Availability Zone. You can use Terraform's `ignoreChanges` functionality to ignore changes to the `zone` and `high_availability[0].standby_availability_zone` fields should you wish for Terraform to not migrate the PostgreSQL Flexible Server back to it's primary Availability Zone after a fail-over.
         *
         * > **Note:** The Availability Zones available depend on the Azure Region that the PostgreSQL Flexible Server is being deployed into - see [the Azure Availability Zones documentation](https://azure.microsoft.com/global-infrastructure/geographies/#geographies) for more information on which Availability Zones are available in each Azure Region.
         */
        standbyAvailabilityZone?: pulumi.Input<string>;
    }
    interface FlexibleServerIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this PostgreSQL Flexible Server. Required if used together with `customerManagedKey` block.
         *
         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this PostgreSQL Flexible Server. Possible values are `UserAssigned`, `SystemAssigned` and `SystemAssigned, UserAssigned`.
         *
         * > **Note:** Once `UserAssigned` has been added, removing it forces a new resource to be created.
         */
        type: pulumi.Input<string>;
    }
    interface FlexibleServerMaintenanceWindow {
        /**
         * The day of week for maintenance window, where the week starts on a Sunday, i.e. Sunday = `0`, Monday = `1`. Defaults to `0`.
         */
        dayOfWeek?: pulumi.Input<number>;
        /**
         * The start hour for maintenance window. Defaults to `0`.
         */
        startHour?: pulumi.Input<number>;
        /**
         * The start minute for maintenance window. Defaults to `0`.
         *
         * > **Note:** The specified `maintenanceWindow` is always defined in UTC time. When unspecified, the maintenance window falls back to the default [system-managed](https://learn.microsoft.com/en-us/azure/postgresql/flexible-server/how-to-maintenance-portal#specify-maintenance-schedule-options).
         */
        startMinute?: pulumi.Input<number>;
    }
    interface ServerIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this PostgreSQL Server. The only possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ServerThreatDetectionPolicy {
        /**
         * Specifies a list of alerts which should be disabled. Possible values are `Sql_Injection`, `Sql_Injection_Vulnerability`, `Access_Anomaly`, `Data_Exfiltration` and `Unsafe_Action`.
         */
        disabledAlerts?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Should the account administrators be emailed when this alert is triggered?
         */
        emailAccountAdmins?: pulumi.Input<boolean>;
        /**
         * A list of email addresses which alerts should be sent to.
         */
        emailAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Is the policy enabled?
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Specifies the number of days to keep in the Threat Detection audit logs.
         */
        retentionDays?: pulumi.Input<number>;
        /**
         * Specifies the identifier key of the Threat Detection audit storage account.
         */
        storageAccountAccessKey?: pulumi.Input<string>;
        /**
         * Specifies the blob storage endpoint (e.g. <https://example.blob.core.windows.net>). This blob storage will hold all Threat Detection audit logs.
         */
        storageEndpoint?: pulumi.Input<string>;
    }
}
export declare namespace privatedns {
    interface LinkServiceNatIpConfiguration {
        /**
         * Specifies the name which should be used for the NAT IP Configuration.
         */
        name: pulumi.Input<string>;
        /**
         * Is this is the Primary IP Configuration?
         */
        primary: pulumi.Input<boolean>;
        /**
         * Specifies a Private Static IP Address for this IP Configuration.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The version of the IP Protocol which should be used. At this time the only supported value is `IPv4`. Defaults to `IPv4`.
         */
        privateIpAddressVersion?: pulumi.Input<string>;
        /**
         * Specifies the ID of the Subnet which should be used for the Private Link Service.
         *
         * > **Note:** Verify that the Subnet's `enforcePrivateLinkServiceNetworkPolicies` attribute is set to `true`.
         */
        subnetId: pulumi.Input<string>;
    }
    interface MxRecordRecord {
        /**
         * The FQDN of the exchange to MX record points to.
         */
        exchange: pulumi.Input<string>;
        /**
         * The preference of the MX record.
         */
        preference: pulumi.Input<number>;
    }
    interface ResolverForwardingRuleTargetDnsServer {
        /**
         * DNS server IP address.
         */
        ipAddress: pulumi.Input<string>;
        /**
         * DNS server port.
         */
        port?: pulumi.Input<number>;
    }
    interface ResolverInboundEndpointIpConfigurations {
        /**
         * Private IP address of the IP configuration. Changing this forces a new resource to be created.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * Private IP address allocation method. Possible values are `Dynamic` and `Static`. Defaults to `Dynamic`. Changing this forces a new resource to be created.
         */
        privateIpAllocationMethod?: pulumi.Input<string>;
        /**
         * The subnet ID of the IP configuration. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
    }
    interface SRVRecordRecord {
        /**
         * The Port the service is listening on.
         */
        port: pulumi.Input<number>;
        /**
         * The priority of the SRV record.
         */
        priority: pulumi.Input<number>;
        /**
         * The FQDN of the service.
         */
        target: pulumi.Input<string>;
        /**
         * The Weight of the SRV record.
         */
        weight: pulumi.Input<number>;
    }
    interface TxtRecordRecord {
        /**
         * The value of the TXT record. Max length: 1024 characters
         */
        value: pulumi.Input<string>;
    }
    interface ZoneSoaRecord {
        /**
         * The email contact for the SOA record.
         */
        email: pulumi.Input<string>;
        /**
         * The expire time for the SOA record. Defaults to `2419200`.
         */
        expireTime?: pulumi.Input<number>;
        /**
         * The fully qualified domain name of the Record Set.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * The domain name of the authoritative name server for the SOA record.
         */
        hostName?: pulumi.Input<string>;
        /**
         * The minimum Time To Live for the SOA record. By convention, it is used to determine the negative caching duration. Defaults to `10`.
         */
        minimumTtl?: pulumi.Input<number>;
        /**
         * The refresh time for the SOA record. Defaults to `3600`.
         */
        refreshTime?: pulumi.Input<number>;
        /**
         * The retry time for the SOA record. Defaults to `300`.
         */
        retryTime?: pulumi.Input<number>;
        /**
         * The serial number for the SOA record.
         */
        serialNumber?: pulumi.Input<number>;
        /**
         * A mapping of tags to assign to the Record Set.
         */
        tags?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Time To Live of the SOA Record in seconds. Defaults to `3600`.
         */
        ttl?: pulumi.Input<number>;
    }
}
export declare namespace privatelink {
    interface EndpointCustomDnsConfig {
        /**
         * The fully qualified domain name to the `privateDnsZone`.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * A list of all IP Addresses that map to the `privateDnsZone` fqdn.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointIpConfiguration {
        /**
         * Specifies the member name this IP address applies to. If it is not specified, it will use the value of `subresourceName`. Changing this forces a new resource to be created.
         *
         * > **Note:** `memberName` will be required and will not take the value of `subresourceName` in the next major version.
         */
        memberName?: pulumi.Input<string>;
        /**
         * Specifies the Name of the IP Configuration. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the static IP address within the private endpoint's subnet to be used. Changing this forces a new resource to be created.
         */
        privateIpAddress: pulumi.Input<string>;
        /**
         * Specifies the subresource this IP address applies to. `subresourceNames` corresponds to `groupId`. Changing this forces a new resource to be created.
         */
        subresourceName?: pulumi.Input<string>;
    }
    interface EndpointNetworkInterface {
        /**
         * The ID of the Private DNS Zone Config.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the Name of the Private Endpoint. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface EndpointPrivateDnsZoneConfig {
        /**
         * The ID of the Private DNS Zone Config.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the Name of the Private Endpoint. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The ID of the Private DNS Zone that the config belongs to.
         */
        privateDnsZoneId?: pulumi.Input<string>;
        /**
         * A `recordSets` block as defined below.
         */
        recordSets?: pulumi.Input<pulumi.Input<inputs.privatelink.EndpointPrivateDnsZoneConfigRecordSet>[]>;
    }
    interface EndpointPrivateDnsZoneConfigRecordSet {
        /**
         * The fully qualified domain name to the `privateDnsZone`.
         */
        fqdn?: pulumi.Input<string>;
        /**
         * A list of all IP Addresses that map to the `privateDnsZone` fqdn.
         */
        ipAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the Name of the Private Endpoint. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The time to live for each connection to the `privateDnsZone`.
         */
        ttl?: pulumi.Input<number>;
        /**
         * The type of DNS record.
         */
        type?: pulumi.Input<string>;
    }
    interface EndpointPrivateDnsZoneGroup {
        /**
         * The ID of the Private DNS Zone Config.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the Name of the Private DNS Zone Group.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the list of Private DNS Zones to include within the `privateDnsZoneGroup`.
         */
        privateDnsZoneIds: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface EndpointPrivateServiceConnection {
        /**
         * Does the Private Endpoint require Manual Approval from the remote resource owner? Changing this forces a new resource to be created.
         *
         * > **Note:** If you are trying to connect the Private Endpoint to a remote resource without having the correct RBAC permissions on the remote resource set this value to `true`.
         */
        isManualConnection: pulumi.Input<boolean>;
        /**
         * Specifies the Name of the Private Service Connection. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The Service Alias of the Private Link Enabled Remote Resource which this Private Endpoint should be connected to. One of `privateConnectionResourceId` or `privateConnectionResourceAlias` must be specified. Changing this forces a new resource to be created.
         */
        privateConnectionResourceAlias?: pulumi.Input<string>;
        /**
         * The ID of the Private Link Enabled Remote Resource which this Private Endpoint should be connected to. One of `privateConnectionResourceId` or `privateConnectionResourceAlias` must be specified. Changing this forces a new resource to be created. For a web app or function app slot, the parent web app should be used in this field instead of a reference to the slot itself.
         */
        privateConnectionResourceId?: pulumi.Input<string>;
        /**
         * (Required) The static IP address set by this configuration. It is recommended to use the private IP address exported in the `privateServiceConnection` block to obtain the address associated with the private endpoint.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * A message passed to the owner of the remote resource when the private endpoint attempts to establish the connection to the remote resource. The provider allows a maximum request message length of `140` characters, however the request message maximum length is dependent on the service the private endpoint is connected to. Only valid if `isManualConnection` is set to `true`.
         *
         * > **Note:** When connected to an SQL resource the `requestMessage` maximum length is `128`.
         */
        requestMessage?: pulumi.Input<string>;
        /**
         * A list of subresource names which the Private Endpoint is able to connect to. `subresourceNames` corresponds to `groupId`. Possible values are detailed in the product [documentation](https://docs.microsoft.com/azure/private-link/private-endpoint-overview#private-link-resource) in the `Subresources` column. Changing this forces a new resource to be created.
         *
         * > **Note:** Some resource types (such as Storage Account) only support 1 subresource per private endpoint.
         *
         * > **Note:** For most Private Links one or more `subresourceNames` will need to be specified, please see the linked documentation for details.
         */
        subresourceNames?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace purview {
    interface AccountIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Purview Account.
         *
         * > **Note:** This is required when `type` is set to `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Purview Account. Possible values are `SystemAssigned` and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface AccountManagedResource {
        /**
         * The ID of the managed event hub namespace.
         */
        eventHubNamespaceId?: pulumi.Input<string>;
        /**
         * The ID of the managed resource group.
         */
        resourceGroupId?: pulumi.Input<string>;
        /**
         * The ID of the managed storage account.
         */
        storageAccountId?: pulumi.Input<string>;
    }
}
export declare namespace recoveryservices {
    interface VaultEncryption {
        /**
         * Enabling/Disabling the Double Encryption state.
         */
        infrastructureEncryptionEnabled: pulumi.Input<boolean>;
        /**
         * The Key Vault key id used to encrypt this vault. Key managed by Vault Managed Hardware Security Module is also supported.
         */
        keyId: pulumi.Input<string>;
        /**
         * Indicate that system assigned identity should be used or not. Defaults to `true`. Must be set to `false` when `userAssignedIdentityId` is set.
         *
         * !> **Note:** `useSystemAssignedIdentity` only be able to set to `false` for **new** vaults. Any vaults containing existing items registered or attempted to be registered to it are not supported. Details can be found in [the document](https://learn.microsoft.com/en-us/azure/backup/encryption-at-rest-with-cmk?tabs=portal#before-you-start)
         *
         * !> **Note:** Once `infrastructureEncryptionEnabled` has been set it's not possible to change it.
         */
        useSystemAssignedIdentity?: pulumi.Input<boolean>;
        /**
         * Specifies the user assigned identity ID to be used.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface VaultIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this App Configuration.
         *
         * > **Note:** `identityIds` is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Recovery Services Vault. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface VaultMonitoring {
        /**
         * Enabling/Disabling built-in Azure Monitor alerts for security scenarios and job failure scenarios. Defaults to `true`.
         */
        alertsForAllJobFailuresEnabled?: pulumi.Input<boolean>;
        /**
         * Enabling/Disabling alerts from the older (classic alerts) solution. Defaults to `true`. More details could be found [here](https://learn.microsoft.com/en-us/azure/backup/monitoring-and-alerts-overview).
         */
        alertsForCriticalOperationFailuresEnabled?: pulumi.Input<boolean>;
    }
}
export declare namespace redhatopenshift {
    interface ClusterApiServerProfile {
        /**
         * The IP Address the Ingress Profile is associated with.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The URL the API Server Profile is associated with.
         */
        url?: pulumi.Input<string>;
        /**
         * Cluster API server visibility. Supported values are `Public` and `Private`. Changing this forces a new resource to be created.
         */
        visibility: pulumi.Input<string>;
    }
    interface ClusterClusterProfile {
        /**
         * The custom domain for the cluster. For more info, see [Prepare a custom domain for your cluster](https://docs.microsoft.com/azure/openshift/tutorial-create-cluster#prepare-a-custom-domain-for-your-cluster-optional). Changing this forces a new resource to be created.
         */
        domain: pulumi.Input<string>;
        /**
         * Whether Federal Information Processing Standard (FIPS) validated cryptographic modules are used. Defaults to `false`. Changing this forces a new resource to be created.
         */
        fipsEnabled?: pulumi.Input<boolean>;
        /**
         * The name of a Resource Group which will be created to host VMs of Azure Red Hat OpenShift Cluster. The value cannot contain uppercase characters. Changing this forces a new resource to be created.
         */
        managedResourceGroupName?: pulumi.Input<string>;
        /**
         * The Red Hat pull secret for the cluster. For more info, see [Get a Red Hat pull secret](https://learn.microsoft.com/azure/openshift/tutorial-create-cluster#get-a-red-hat-pull-secret-optional). Changing this forces a new resource to be created.
         */
        pullSecret?: pulumi.Input<string>;
        /**
         * The resource group that the cluster profile is attached to.
         */
        resourceGroupId?: pulumi.Input<string>;
        /**
         * The version of the OpenShift cluster. Available versions can be found with the Azure CLI command `az aro get-versions --location <region>`. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface ClusterIngressProfile {
        /**
         * The IP Address the Ingress Profile is associated with.
         */
        ipAddress?: pulumi.Input<string>;
        /**
         * The name of the Azure Red Hat OpenShift Cluster to create. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * Cluster Ingress visibility. Supported values are `Public` and `Private`. Changing this forces a new resource to be created.
         */
        visibility: pulumi.Input<string>;
    }
    interface ClusterMainProfile {
        /**
         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * Whether main virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
         *
         * > **Note:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the subnet where main nodes will be hosted. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * The size of the Virtual Machines for the main nodes. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
    interface ClusterNetworkProfile {
        /**
         * The outbound (egress) routing method. Possible values are `Loadbalancer` and `UserDefinedRouting`. Defaults to `Loadbalancer`. Changing this forces a new resource to be created.
         */
        outboundType?: pulumi.Input<string>;
        /**
         * The CIDR to use for pod IP addresses. Changing this forces a new resource to be created.
         */
        podCidr: pulumi.Input<string>;
        /**
         * Whether a preconfigured network security group is being used on the subnets. Defaults to `false`. Changing this forces a new resource to be created.
         */
        preconfiguredNetworkSecurityGroupEnabled?: pulumi.Input<boolean>;
        /**
         * The network range used by the OpenShift service. Changing this forces a new resource to be created.
         */
        serviceCidr: pulumi.Input<string>;
    }
    interface ClusterServicePrincipal {
        /**
         * The Client ID for the Service Principal.
         */
        clientId: pulumi.Input<string>;
        /**
         * The Client Secret for the Service Principal.
         *
         * > **Note:** Currently a service principal cannot be associated with more than one ARO clusters on the Azure subscription.
         */
        clientSecret: pulumi.Input<string>;
    }
    interface ClusterWorkerProfile {
        /**
         * The resource ID of an associated disk encryption set. Changing this forces a new resource to be created.
         */
        diskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The internal OS disk size of the worker Virtual Machines in GB. Changing this forces a new resource to be created.
         */
        diskSizeGb: pulumi.Input<number>;
        /**
         * Whether worker virtual machines are encrypted at host. Defaults to `false`. Changing this forces a new resource to be created.
         *
         * > **Note:** `encryptionAtHostEnabled` is only available for certain VM sizes and the `EncryptionAtHost` feature must be enabled for your subscription. Please see the [Azure documentation](https://learn.microsoft.com/azure/virtual-machines/disks-enable-host-based-encryption-portal?tabs=azure-powershell) for more information.
         */
        encryptionAtHostEnabled?: pulumi.Input<boolean>;
        /**
         * The initial number of worker nodes which should exist in the cluster. Changing this forces a new resource to be created.
         */
        nodeCount: pulumi.Input<number>;
        /**
         * The ID of the subnet where worker nodes will be hosted. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * The size of the Virtual Machines for the worker nodes. Changing this forces a new resource to be created.
         */
        vmSize: pulumi.Input<string>;
    }
}
export declare namespace redis {
    interface CacheIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this Redis Cluster.
         *
         * > **NOTE:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Redis Cluster. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface CachePatchSchedule {
        /**
         * the Weekday name - possible values include `Monday`, `Tuesday`, `Wednesday` etc.
         */
        dayOfWeek: pulumi.Input<string>;
        /**
         * The ISO 8601 timespan which specifies the amount of time the Redis Cache can be updated. Defaults to `PT5H`.
         */
        maintenanceWindow?: pulumi.Input<string>;
        /**
         * the Start Hour for maintenance in UTC - possible values range from `0 - 23`.
         *
         * > **Note:** The Patch Window lasts for `5` hours from the `startHourUtc`.
         */
        startHourUtc?: pulumi.Input<number>;
    }
    interface CacheRedisConfiguration {
        /**
         * Enable Microsoft Entra (AAD) authentication. Defaults to `false`.
         */
        activeDirectoryAuthenticationEnabled?: pulumi.Input<boolean>;
        /**
         * Enable or disable AOF persistence for this Redis Cache. Defaults to `false`.
         *
         * > **NOTE:** `aofBackupEnabled` can only be set when SKU is `Premium`.
         */
        aofBackupEnabled?: pulumi.Input<boolean>;
        /**
         * First Storage Account connection string for AOF persistence.
         */
        aofStorageConnectionString0?: pulumi.Input<string>;
        /**
         * Second Storage Account connection string for AOF persistence.
         *
         * Example usage:
         */
        aofStorageConnectionString1?: pulumi.Input<string>;
        /**
         * If set to `false`, the Redis instance will be accessible without authentication. Defaults to `true`.
         *
         * > **NOTE:** `authenticationEnabled` can only be set to `false` if a `subnetId` is specified; and only works if there aren't existing instances within the subnet with `authenticationEnabled` set to `true`.
         */
        authenticationEnabled?: pulumi.Input<boolean>;
        /**
         * Preferred auth method to communicate to storage account used for data persistence. Possible values are `SAS` and `ManagedIdentity`.
         */
        dataPersistenceAuthenticationMethod?: pulumi.Input<string>;
        /**
         * Returns the max number of connected clients at the same time.
         */
        maxclients?: pulumi.Input<number>;
        /**
         * Value in megabytes reserved to accommodate for memory fragmentation. Defaults are shown below.
         */
        maxfragmentationmemoryReserved?: pulumi.Input<number>;
        /**
         * The max-memory delta for this Redis instance. Defaults are shown below.
         */
        maxmemoryDelta?: pulumi.Input<number>;
        /**
         * How Redis will select what to remove when `maxmemory` is reached. Defaults to `volatile-lru`.
         */
        maxmemoryPolicy?: pulumi.Input<string>;
        /**
         * Value in megabytes reserved for non-cache usage e.g. failover. Defaults are shown below.
         */
        maxmemoryReserved?: pulumi.Input<number>;
        /**
         * Keyspace notifications allows clients to subscribe to Pub/Sub channels in order to receive events affecting the Redis data set in some way. [Reference](https://redis.io/topics/notifications#configuration)
         */
        notifyKeyspaceEvents?: pulumi.Input<string>;
        /**
         * Is Backup Enabled? Only supported on Premium SKUs. Defaults to `false`.
         *
         * > **NOTE:** If `rdbBackupEnabled` set to `true`, `rdbStorageConnectionString` must also be set.
         */
        rdbBackupEnabled?: pulumi.Input<boolean>;
        /**
         * The Backup Frequency in Minutes. Only supported on Premium SKUs. Possible values are: `15`, `30`, `60`, `360`, `720` and `1440`.
         */
        rdbBackupFrequency?: pulumi.Input<number>;
        /**
         * The maximum number of snapshots to create as a backup. Only supported for Premium SKUs.
         */
        rdbBackupMaxSnapshotCount?: pulumi.Input<number>;
        /**
         * The Connection String to the Storage Account. Only supported for Premium SKUs. In the format: `DefaultEndpointsProtocol=https;BlobEndpoint=${azurerm_storage_account.example.primary_blob_endpoint};AccountName=${azurerm_storage_account.example.name};AccountKey=${azurerm_storage_account.example.primary_access_key}`.
         *
         * > **NOTE:** There's a bug in the Redis API where the original storage connection string isn't being returned, which [is being tracked in this issue](https://github.com/Azure/azure-rest-api-specs/issues/3037). In the interim you can use [the `ignoreChanges` attribute to ignore changes to this field](https://www.pulumi.com/docs/intro/concepts/programming-model/#ignorechanges) e.g.:
         */
        rdbStorageConnectionString?: pulumi.Input<string>;
        /**
         * The ID of the Subscription containing the Storage Account.
         */
        storageAccountSubscriptionId?: pulumi.Input<string>;
    }
    interface EnterpriseDatabaseModule {
        /**
         * Configuration options for the module (e.g. `ERROR_RATE 0.00 INITIAL_SIZE 400`). Changing this forces a new resource to be created. Defaults to `""`.
         */
        args?: pulumi.Input<string>;
        /**
         * The name which should be used for this module. Possible values are `RedisBloom`, `RedisTimeSeries`, `RediSearch` and `RedisJSON`. Changing this forces a new Redis Enterprise Database to be created.
         */
        name: pulumi.Input<string>;
        version?: pulumi.Input<string>;
    }
}
export declare namespace role {
    interface DefinitionPermission {
        /**
         * One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        actions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Allowed Data Actions, such as `*`, `Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        dataActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        notActions?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more Disallowed Data Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
         */
        notDataActions?: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace search {
    interface ServiceIdentity {
        /**
         * Specifies the list of User Assigned Managed Service Identity IDs which should be assigned to this Search Service.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Search Service. Possible values are `SystemAssigned`, `UserAssigned`, and `SystemAssigned, UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ServiceQueryKey {
        /**
         * The value of this Query Key.
         */
        key?: pulumi.Input<string>;
        /**
         * The Name which should be used for this Search Service. Changing this forces a new Search Service to be created.
         */
        name?: pulumi.Input<string>;
    }
}
export declare namespace securitycenter {
    interface AssessmentStatus {
        /**
         * Specifies the cause of the assessment status.
         */
        cause?: pulumi.Input<string>;
        /**
         * Specifies the programmatic code of the assessment status. Possible values are `Healthy`, `Unhealthy` and `NotApplicable`.
         */
        code: pulumi.Input<string>;
        /**
         * Specifies the human readable description of the assessment status.
         */
        description?: pulumi.Input<string>;
    }
    interface AutomationAction {
        /**
         * A connection string to send data to the target Event Hub namespace, this should include a key with send permissions.
         *
         * > **Note:** `connectionString` is required when `type` is `EventHub`.
         */
        connectionString?: pulumi.Input<string>;
        /**
         * The resource id of the target Logic App, Event Hub namespace or Log Analytics workspace.
         */
        resourceId: pulumi.Input<string>;
        /**
         * The callback URL to trigger the Logic App that will receive and process data sent by this automation. This can be found in the Azure Portal under "See trigger history"
         *
         * > **Note:** `triggerUrl` is required when `type` is `LogicApp`.
         */
        triggerUrl?: pulumi.Input<string>;
        /**
         * Type of Azure resource to send data to. Possible values are `EventHub`, `LogicApp` and `Workspace`.
         */
        type?: pulumi.Input<string>;
    }
    interface AutomationSource {
        /**
         * Type of data that will trigger this automation. Must be one of `Alerts`, `Assessments`, `AssessmentsSnapshot`, `RegulatoryComplianceAssessment`, `RegulatoryComplianceAssessmentSnapshot`, `SecureScoreControls`, `SecureScoreControlsSnapshot`, `SecureScores`, `SecureScoresSnapshot`, `SubAssessments` or `SubAssessmentsSnapshot`. Note. assessments are also referred to as recommendations
         */
        eventSource: pulumi.Input<string>;
        /**
         * A set of rules which evaluate upon event and data interception. This is defined in one or more `ruleSet` blocks as defined below.
         *
         * > **Note:** When multiple `ruleSet` block are provided, a logical 'OR' is applied to the evaluation of them.
         */
        ruleSets?: pulumi.Input<pulumi.Input<inputs.securitycenter.AutomationSourceRuleSet>[]>;
    }
    interface AutomationSourceRuleSet {
        /**
         * One or more `rule` blocks as defined below.
         *
         * > **Note:** This automation will trigger when all of the `rule`s in this `ruleSet` are evaluated as 'true'. This is equivalent to a logical 'AND'.
         */
        rules: pulumi.Input<pulumi.Input<inputs.securitycenter.AutomationSourceRuleSetRule>[]>;
    }
    interface AutomationSourceRuleSetRule {
        /**
         * A value that will be compared with the value in `propertyPath`.
         */
        expectedValue: pulumi.Input<string>;
        /**
         * The comparison operator to use, must be one of: `Contains`, `EndsWith`, `Equals`, `GreaterThan`, `GreaterThanOrEqualTo`, `LesserThan`, `LesserThanOrEqualTo`, `NotEquals`, `StartsWith`
         */
        operator: pulumi.Input<string>;
        /**
         * The JPath of the entity model property that should be checked.
         */
        propertyPath: pulumi.Input<string>;
        /**
         * The data type of the compared operands, must be one of: `Integer`, `String`, `Boolean` or `Number`.
         *
         * > **Note:** The schema for Security Center alerts (when `eventSource` is "Alerts") [can be found here](https://docs.microsoft.com/azure/security-center/alerts-schemas?tabs=schema-continuousexport)
         */
        propertyType: pulumi.Input<string>;
    }
    interface SubscriptionPricingExtension {
        /**
         * Key/Value pairs that are required for some extensions.
         *
         * > **Note:** If an extension is not defined, it will not be enabled.
         *
         * > **Note:** Changing the pricing tier to `Standard` affects all resources of the given type in the subscription and could be quite costly.
         */
        additionalExtensionProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The name of extension.
         */
        name: pulumi.Input<string>;
    }
}
export declare namespace sentinel {
    interface AlertRuleAnomalyBuiltInMultiSelectObservation {
        /**
         * The description of the threshold observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The Name of the built-in Anomaly Alert Rule.
         */
        name?: pulumi.Input<string>;
        /**
         * A list of supported values of the single select observation.
         */
        supportedValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of values of the single select observation.
         */
        values?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertRuleAnomalyBuiltInPrioritizedExcludeObservation {
        /**
         * The description of the threshold observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The excluded value per `description`.
         */
        exclude?: pulumi.Input<string>;
        /**
         * The Name of the built-in Anomaly Alert Rule.
         */
        name?: pulumi.Input<string>;
        /**
         * The prioritized value per `description`.
         */
        prioritize?: pulumi.Input<string>;
    }
    interface AlertRuleAnomalyBuiltInRequiredDataConnector {
        /**
         * The ID of the required Data Connector.
         */
        connectorId?: pulumi.Input<string>;
        /**
         * A list of data types of the required Data Connector.
         */
        dataTypes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertRuleAnomalyBuiltInSingleSelectObservation {
        /**
         * The description of the threshold observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The Name of the built-in Anomaly Alert Rule.
         */
        name?: pulumi.Input<string>;
        /**
         * A list of supported values of the single select observation.
         */
        supportedValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The value of the threshold observation.
         */
        value?: pulumi.Input<string>;
    }
    interface AlertRuleAnomalyBuiltInThresholdObservation {
        /**
         * The description of the threshold observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The max value of the threshold observation.
         */
        max?: pulumi.Input<string>;
        /**
         * The min value of the threshold observation.
         */
        min?: pulumi.Input<string>;
        /**
         * The Name of the built-in Anomaly Alert Rule.
         */
        name?: pulumi.Input<string>;
        /**
         * The value of the threshold observation.
         */
        value?: pulumi.Input<string>;
    }
    interface AlertRuleAnomalyDuplicateMultiSelectObservation {
        /**
         * The description of the multi select observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the multi select observation.
         */
        name: pulumi.Input<string>;
        /**
         * A list of supported values of the multi select observation.
         */
        supportedValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of values of the multi select observation.
         */
        values: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertRuleAnomalyDuplicatePrioritizedExcludeObservation {
        /**
         * The description of the prioritized exclude observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The excluded value per `description`.
         */
        exclude?: pulumi.Input<string>;
        /**
         * The name of the prioritized exclude observation.
         */
        name: pulumi.Input<string>;
        /**
         * The prioritized value per `description`.
         */
        prioritize?: pulumi.Input<string>;
    }
    interface AlertRuleAnomalyDuplicateRequiredDataConnector {
        /**
         * The ID of the required Data Connector.
         */
        connectorId?: pulumi.Input<string>;
        /**
         * A list of data types of the required Data Connector.
         */
        dataTypes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertRuleAnomalyDuplicateSingleSelectObservation {
        /**
         * The description of the single select observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The name of the single select observation.
         */
        name: pulumi.Input<string>;
        /**
         * A list of supported values of the single select observation.
         */
        supportedValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The value of the multi select observation.
         */
        value: pulumi.Input<string>;
    }
    interface AlertRuleAnomalyDuplicateThresholdObservation {
        /**
         * The description of the threshold observation.
         */
        description?: pulumi.Input<string>;
        /**
         * The max value of the threshold observation.
         */
        max?: pulumi.Input<string>;
        /**
         * The min value of the threshold observation.
         */
        min?: pulumi.Input<string>;
        /**
         * The name of the threshold observation.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the threshold observation.
         */
        value: pulumi.Input<string>;
    }
    interface AlertRuleFusionSource {
        /**
         * Whether this source signal is enabled or disabled in Fusion detection? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The name of the Fusion source signal. Refer to Fusion alert rule template for supported values.
         */
        name: pulumi.Input<string>;
        /**
         * One or more `subType` blocks as defined below.
         */
        subTypes?: pulumi.Input<pulumi.Input<inputs.sentinel.AlertRuleFusionSourceSubType>[]>;
    }
    interface AlertRuleFusionSourceSubType {
        /**
         * Whether this source subtype under source signal is enabled or disabled in Fusion detection. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The Name of the source subtype under a given source signal in Fusion detection. Refer to Fusion alert rule template for supported values.
         */
        name: pulumi.Input<string>;
        /**
         * A list of severities that are enabled for this source subtype consumed in Fusion detection. Possible values for each element are `High`, `Medium`, `Low`, `Informational`.
         */
        severitiesAlloweds: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AlertRuleNrtAlertDetailsOverride {
        /**
         * The format containing columns name(s) to override the description of this Sentinel Alert Rule.
         */
        descriptionFormat?: pulumi.Input<string>;
        /**
         * The format containing columns name(s) to override the name of this Sentinel Alert Rule.
         */
        displayNameFormat?: pulumi.Input<string>;
        /**
         * A list of `dynamicProperty` blocks as defined below.
         */
        dynamicProperties?: pulumi.Input<pulumi.Input<inputs.sentinel.AlertRuleNrtAlertDetailsOverrideDynamicProperty>[]>;
        /**
         * The column name to take the alert severity from.
         */
        severityColumnName?: pulumi.Input<string>;
        /**
         * The column name to take the alert tactics from.
         */
        tacticsColumnName?: pulumi.Input<string>;
    }
    interface AlertRuleNrtAlertDetailsOverrideDynamicProperty {
        /**
         * The name of the dynamic property. Possible values are `AlertLink`, `ConfidenceLevel`, `ConfidenceScore`, `ExtendedLinks`, `ProductComponentName`, `ProductName`, `ProviderName`, `RemediationSteps`, `SubTechniques` and `Techniques`.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the dynamic property. Pssible Values are `Caller`, `dcount_ResourceId` and `EventSubmissionTimestamp`.
         */
        value: pulumi.Input<string>;
    }
    interface AlertRuleNrtEntityMapping {
        /**
         * The type of the entity. Possible values are `Account`, `AzureResource`, `CloudApplication`, `DNS`, `File`, `FileHash`, `Host`, `IP`, `Mailbox`, `MailCluster`, `MailMessage`, `Malware`, `Process`, `RegistryKey`, `RegistryValue`, `SecurityGroup`, `SubmissionMail`, `URL`.
         */
        entityType: pulumi.Input<string>;
        /**
         * A list of `fieldMapping` blocks as defined below.
         */
        fieldMappings: pulumi.Input<pulumi.Input<inputs.sentinel.AlertRuleNrtEntityMappingFieldMapping>[]>;
    }
    interface AlertRuleNrtEntityMappingFieldMapping {
        /**
         * The column name to be mapped to the identifier.
         */
        columnName: pulumi.Input<string>;
        /**
         * The identifier of the entity.
         */
        identifier: pulumi.Input<string>;
    }
    interface AlertRuleNrtEventGrouping {
        /**
         * The aggregation type of grouping the events. Possible values are `AlertPerResult` and `SingleAlert`.
         */
        aggregationMethod: pulumi.Input<string>;
    }
    interface AlertRuleNrtIncident {
        /**
         * Whether to create an incident from alerts triggered by this Sentinel NRT Alert Rule?
         */
        createIncidentEnabled: pulumi.Input<boolean>;
        /**
         * A `grouping` block as defined below.
         */
        grouping: pulumi.Input<inputs.sentinel.AlertRuleNrtIncidentGrouping>;
    }
    interface AlertRuleNrtIncidentGrouping {
        /**
         * A list of alert details to group by, only when the `entityMatchingMethod` is `Selected`. Possible values are `DisplayName` and `Severity`.
         */
        byAlertDetails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of custom details keys to group by, only when the `entityMatchingMethod` is `Selected`. Only keys defined in the `customDetails` may be used.
         */
        byCustomDetails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of entity types to group by, only when the `entityMatchingMethod` is `Selected`. Possible values are `Account`, `AzureResource`, `CloudApplication`, `DNS`, `File`, `FileHash`, `Host`, `IP`, `Mailbox`, `MailCluster`, `MailMessage`, `Malware`, `Process`, `RegistryKey`, `RegistryValue`, `SecurityGroup`, `SubmissionMail`, `URL`.
         */
        byEntities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Enable grouping incidents created from alerts triggered by this Sentinel NRT Alert Rule. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The method used to group incidents. Possible values are `AnyAlert`, `Selected` and `AllEntities`. Defaults to `AnyAlert`.
         */
        entityMatchingMethod?: pulumi.Input<string>;
        /**
         * Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.
         */
        lookbackDuration?: pulumi.Input<string>;
        /**
         * Whether to re-open closed matching incidents? Defaults to `false`.
         */
        reopenClosedIncidents?: pulumi.Input<boolean>;
    }
    interface AlertRuleNrtSentinelEntityMapping {
        /**
         * The column name to be mapped to the identifier.
         */
        columnName: pulumi.Input<string>;
    }
    interface AlertRuleScheduledAlertDetailsOverride {
        /**
         * The format containing columns name(s) to override the description of this Sentinel Alert Rule.
         */
        descriptionFormat?: pulumi.Input<string>;
        /**
         * The format containing columns name(s) to override the name of this Sentinel Alert Rule.
         */
        displayNameFormat?: pulumi.Input<string>;
        /**
         * A list of `dynamicProperty` blocks as defined below.
         */
        dynamicProperties?: pulumi.Input<pulumi.Input<inputs.sentinel.AlertRuleScheduledAlertDetailsOverrideDynamicProperty>[]>;
        /**
         * The column name to take the alert severity from.
         */
        severityColumnName?: pulumi.Input<string>;
        /**
         * The column name to take the alert tactics from.
         */
        tacticsColumnName?: pulumi.Input<string>;
    }
    interface AlertRuleScheduledAlertDetailsOverrideDynamicProperty {
        /**
         * The name of the dynamic property. Possible values are `AlertLink`, `ConfidenceLevel`, `ConfidenceScore`, `ExtendedLinks`, `ProductComponentName`, `ProductName`, `ProviderName`, `RemediationSteps`, `SubTechniques` and `Techniques`.
         */
        name: pulumi.Input<string>;
        /**
         * The value of the dynamic property. Pssible Values are `Caller`, `dcount_ResourceId` and `EventSubmissionTimestamp`.
         */
        value: pulumi.Input<string>;
    }
    interface AlertRuleScheduledEntityMapping {
        /**
         * The type of the entity. Possible values are `Account`, `AzureResource`, `CloudApplication`, `DNS`, `File`, `FileHash`, `Host`, `IP`, `Mailbox`, `MailCluster`, `MailMessage`, `Malware`, `Process`, `RegistryKey`, `RegistryValue`, `SecurityGroup`, `SubmissionMail`, `URL`.
         */
        entityType: pulumi.Input<string>;
        /**
         * A list of `fieldMapping` blocks as defined below.
         */
        fieldMappings: pulumi.Input<pulumi.Input<inputs.sentinel.AlertRuleScheduledEntityMappingFieldMapping>[]>;
    }
    interface AlertRuleScheduledEntityMappingFieldMapping {
        /**
         * The column name to be mapped to the identifier.
         */
        columnName: pulumi.Input<string>;
        /**
         * The identifier of the entity.
         */
        identifier: pulumi.Input<string>;
    }
    interface AlertRuleScheduledEventGrouping {
        /**
         * The aggregation type of grouping the events. Possible values are `AlertPerResult` and `SingleAlert`.
         */
        aggregationMethod: pulumi.Input<string>;
    }
    interface AlertRuleScheduledIncident {
        /**
         * Whether to create an incident from alerts triggered by this Sentinel Scheduled Alert Rule?
         */
        createIncidentEnabled: pulumi.Input<boolean>;
        /**
         * A `grouping` block as defined below.
         */
        grouping: pulumi.Input<inputs.sentinel.AlertRuleScheduledIncidentGrouping>;
    }
    interface AlertRuleScheduledIncidentGrouping {
        /**
         * A list of alert details to group by, only when the `entityMatchingMethod` is `Selected`. Possible values are `DisplayName` and `Severity`.
         */
        byAlertDetails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of custom details keys to group by, only when the `entityMatchingMethod` is `Selected`. Only keys defined in the `customDetails` may be used.
         */
        byCustomDetails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of entity types to group by, only when the `entityMatchingMethod` is `Selected`. Possible values are `Account`, `AzureResource`, `CloudApplication`, `DNS`, `File`, `FileHash`, `Host`, `IP`, `Mailbox`, `MailCluster`, `MailMessage`, `Malware`, `Process`, `RegistryKey`, `RegistryValue`, `SecurityGroup`, `SubmissionMail`, `URL`.
         */
        byEntities?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * The method used to group incidents. Possible values are `AnyAlert`, `Selected` and `AllEntities`. Defaults to `AnyAlert`.
         */
        entityMatchingMethod?: pulumi.Input<string>;
        /**
         * Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.
         */
        lookbackDuration?: pulumi.Input<string>;
        /**
         * Whether to re-open closed matching incidents? Defaults to `false`.
         */
        reopenClosedIncidents?: pulumi.Input<boolean>;
    }
    interface AlertRuleScheduledSentinelEntityMapping {
        /**
         * The column name to be mapped to the identifier.
         */
        columnName: pulumi.Input<string>;
    }
    interface AuthomationRuleActionIncident {
        /**
         * The classification of the incident, when closing it. Possible values are: `BenignPositive_SuspiciousButExpected`, `FalsePositive_InaccurateData`, `FalsePositive_IncorrectAlertLogic`, `TruePositive_SuspiciousActivity` and `Undetermined`.
         *
         * > **Note:** The `classification` is required when `status` is `Closed`.
         */
        classification?: pulumi.Input<string>;
        /**
         * The comment why the incident is to be closed.
         *
         * > **Note:** The `classificationComment` is allowed to set only when `status` is `Closed`.
         */
        classificationComment?: pulumi.Input<string>;
        /**
         * Specifies a list of labels to add to the incident.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The object ID of the entity this incident is assigned to.
         */
        ownerId?: pulumi.Input<string>;
        /**
         * The severity to add to the incident. Possible values are `High`, `Informational`, `Low` and `Medium`.
         *
         * > **Note:** At least one of `status`, `labels`, `ownerId` and `severity` has to be set.
         */
        severity?: pulumi.Input<string>;
        /**
         * The status to set to the incident. Possible values are: `Active`, `Closed`, `New`.
         */
        status?: pulumi.Input<string>;
    }
    interface AuthomationRuleActionIncidentTask {
        /**
         * The description of the incident task.
         */
        description?: pulumi.Input<string>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The title of the incident task.
         */
        title: pulumi.Input<string>;
    }
    interface AuthomationRuleActionPlaybook {
        /**
         * The ID of the Logic App that defines the playbook's logic.
         */
        logicAppId: pulumi.Input<string>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The ID of the Tenant that owns the playbook.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface AutomationRuleActionIncident {
        /**
         * The classification of the incident, when closing it. Possible values are: `BenignPositive_SuspiciousButExpected`, `FalsePositive_InaccurateData`, `FalsePositive_IncorrectAlertLogic`, `TruePositive_SuspiciousActivity` and `Undetermined`.
         *
         * > **Note:** The `classification` is required when `status` is `Closed`.
         */
        classification?: pulumi.Input<string>;
        /**
         * The comment why the incident is to be closed.
         *
         * > **Note:** The `classificationComment` is allowed to set only when `status` is `Closed`.
         */
        classificationComment?: pulumi.Input<string>;
        /**
         * Specifies a list of labels to add to the incident.
         */
        labels?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The object ID of the entity this incident is assigned to.
         */
        ownerId?: pulumi.Input<string>;
        /**
         * The severity to add to the incident. Possible values are `High`, `Informational`, `Low` and `Medium`.
         *
         * > **Note:** At least one of `status`, `labels`, `ownerId` and `severity` has to be set.
         */
        severity?: pulumi.Input<string>;
        /**
         * The status to set to the incident. Possible values are: `Active`, `Closed`, `New`.
         */
        status?: pulumi.Input<string>;
    }
    interface AutomationRuleActionIncidentTask {
        /**
         * The description of the incident task.
         */
        description?: pulumi.Input<string>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The title of the incident task.
         */
        title: pulumi.Input<string>;
    }
    interface AutomationRuleActionPlaybook {
        /**
         * The ID of the Logic App that defines the playbook's logic.
         */
        logicAppId: pulumi.Input<string>;
        /**
         * The execution order of this action.
         */
        order: pulumi.Input<number>;
        /**
         * The ID of the Tenant that owns the playbook.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface MetadataAuthor {
        /**
         * The email address of the author contact.
         */
        email?: pulumi.Input<string>;
        /**
         * The link for author/vendor page.
         */
        link?: pulumi.Input<string>;
        /**
         * The name of the author, company or person.
         */
        name?: pulumi.Input<string>;
    }
    interface MetadataCategory {
        /**
         * Specifies a list of domains for the solution content item.
         */
        domains?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies a list of industry verticals for the solution content item.
         */
        verticals?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface MetadataSource {
        /**
         * The id of the content source, the solution ID, Log Analytics Workspace name etc.
         */
        id?: pulumi.Input<string>;
        /**
         * The kind of the content source. Possible values are `Community`, `LocalWorkspace`, `Solution` and `SourceRepository`.
         */
        kind: pulumi.Input<string>;
        /**
         * The name of the content source, repo name, solution name, Log Analytics Workspace name, etc.
         */
        name?: pulumi.Input<string>;
    }
    interface MetadataSupport {
        /**
         * The email address of the support contact.
         */
        email?: pulumi.Input<string>;
        /**
         * The link for support help.
         */
        link?: pulumi.Input<string>;
        /**
         * The name of the support contact.
         */
        name?: pulumi.Input<string>;
        /**
         * The type of support for content item. Possible values are `Microsoft`, `Partner` and `Community`.
         */
        tier: pulumi.Input<string>;
    }
    interface ThreatIntelligenceIndicatorExternalReference {
        /**
         * The description of the external reference of the Threat Intelligence Indicator.
         */
        description?: pulumi.Input<string>;
        /**
         * The list of hashes of the external reference of the Threat Intelligence Indicator.
         */
        hashes?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The ID of the Sentinel Threat Intelligence Indicator.
         */
        id?: pulumi.Input<string>;
        /**
         * The source name of the external reference of the Threat Intelligence Indicator.
         */
        sourceName?: pulumi.Input<string>;
        /**
         * The url of the external reference of the Threat Intelligence Indicator.
         */
        url?: pulumi.Input<string>;
    }
    interface ThreatIntelligenceIndicatorGranularMarking {
        /**
         * The language of granular marking of the Threat Intelligence Indicator.
         */
        language?: pulumi.Input<string>;
        /**
         * The reference of the granular marking of the Threat Intelligence Indicator.
         */
        markingRef?: pulumi.Input<string>;
        /**
         * A list of selectors of the granular marking of the Threat Intelligence Indicator.
         */
        selectors?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ThreatIntelligenceIndicatorKillChainPhase {
        /**
         * The name which should be used for the Lockheed Martin cyber kill chain phase.
         */
        name?: pulumi.Input<string>;
    }
    interface ThreatIntelligenceIndicatorParsedPattern {
        /**
         * The type key of parsed pattern.
         */
        patternTypeKey?: pulumi.Input<string>;
        /**
         * A `patternTypeValues` block as defined below.
         */
        patternTypeValues?: pulumi.Input<pulumi.Input<inputs.sentinel.ThreatIntelligenceIndicatorParsedPatternPatternTypeValue>[]>;
    }
    interface ThreatIntelligenceIndicatorParsedPatternPatternTypeValue {
        /**
         * The value of the parsed pattern type.
         */
        value?: pulumi.Input<string>;
        /**
         * The type of the value of the parsed pattern type value.
         */
        valueType?: pulumi.Input<string>;
    }
}
export declare namespace servicebus {
    interface NamespaceCustomerManagedKey {
        /**
         * The ID of the User Assigned Identity that has access to the key.
         */
        identityId: pulumi.Input<string>;
        /**
         * Used to specify whether enable Infrastructure Encryption (Double Encryption). Changing this forces a new resource to be created.
         */
        infrastructureEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * The ID of the Key Vault Key which should be used to Encrypt the data in this Service Bus Namespace.
         */
        keyVaultKeyId: pulumi.Input<string>;
    }
    interface NamespaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Service Bus namespace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Service Bus Namespace.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Service Bus Namespace.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Service Bus Namespace. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface NamespaceNetworkRuleSet {
        /**
         * Specifies the default action for the Network Rule Set. Possible values are `Allow` and `Deny`. Defaults to `Allow`.
         */
        defaultAction?: pulumi.Input<string>;
        /**
         * One or more IP Addresses, or CIDR Blocks which should be able to access the Service Bus Namespace.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `networkRules` blocks as defined below.
         */
        networkRules?: pulumi.Input<pulumi.Input<inputs.servicebus.NamespaceNetworkRuleSetNetworkRule>[]>;
        /**
         * Whether to allow traffic over public network. Possible values are `true` and `false`. Defaults to `true`.
         *
         * > **Note:** To disable public network access, you must also configure the property `publicNetworkAccessEnabled`.
         */
        publicNetworkAccessEnabled?: pulumi.Input<boolean>;
        /**
         * Are Azure Services that are known and trusted for this resource type are allowed to bypass firewall configuration? See [Trusted Microsoft Services](https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/service-bus-messaging/includes/service-bus-trusted-services.md)
         */
        trustedServicesAllowed?: pulumi.Input<boolean>;
    }
    interface NamespaceNetworkRuleSetNetworkRule {
        /**
         * Should the Service Bus Namespace Network Rule Set ignore missing Virtual Network Service Endpoint option in the Subnet? Defaults to `false`.
         */
        ignoreMissingVnetServiceEndpoint?: pulumi.Input<boolean>;
        /**
         * The Subnet ID which should be able to access this Service Bus Namespace.
         */
        subnetId: pulumi.Input<string>;
    }
    interface SubscriptionClientScopedSubscription {
        /**
         * Specifies the Client ID of the application that created the client-scoped subscription. Changing this forces a new resource to be created.
         *
         * > **Note:** Client ID can be null or empty, but it must match the client ID set on the JMS client application. From the Azure Service Bus perspective, a null client ID and an empty client id have the same behavior. If the client ID is set to null or empty, it is only accessible to client applications whose client ID is also set to null or empty.
         */
        clientId?: pulumi.Input<string>;
        /**
         * Whether the client scoped subscription is durable. This property can only be controlled from the application side.
         */
        isClientScopedSubscriptionDurable?: pulumi.Input<boolean>;
        /**
         * Whether the client scoped subscription is shareable. Defaults to `true` Changing this forces a new resource to be created.
         */
        isClientScopedSubscriptionShareable?: pulumi.Input<boolean>;
    }
    interface SubscriptionRuleCorrelationFilter {
        /**
         * Content type of the message.
         */
        contentType?: pulumi.Input<string>;
        /**
         * Identifier of the correlation.
         */
        correlationId?: pulumi.Input<string>;
        /**
         * Application specific label.
         */
        label?: pulumi.Input<string>;
        /**
         * Identifier of the message.
         */
        messageId?: pulumi.Input<string>;
        /**
         * A list of user defined properties to be included in the filter. Specified as a map of name/value pairs.
         *
         * > **Note:** When creating a subscription rule of type `CorrelationFilter` at least one property must be set in the `correlationFilter` block.
         */
        properties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * Address of the queue to reply to.
         */
        replyTo?: pulumi.Input<string>;
        /**
         * Session identifier to reply to.
         */
        replyToSessionId?: pulumi.Input<string>;
        /**
         * Session identifier.
         */
        sessionId?: pulumi.Input<string>;
        /**
         * Address to send to.
         */
        to?: pulumi.Input<string>;
    }
}
export declare namespace servicefabric {
    interface ClusterAzureActiveDirectory {
        /**
         * The Azure Active Directory Client ID which should be used for the Client Application.
         */
        clientApplicationId: pulumi.Input<string>;
        /**
         * The Azure Active Directory Cluster Application ID.
         */
        clusterApplicationId: pulumi.Input<string>;
        /**
         * The Azure Active Directory Tenant ID.
         */
        tenantId: pulumi.Input<string>;
    }
    interface ClusterCertificate {
        /**
         * The Thumbprint of the Certificate.
         */
        thumbprint: pulumi.Input<string>;
        /**
         * The Secondary Thumbprint of the Certificate.
         */
        thumbprintSecondary?: pulumi.Input<string>;
        /**
         * The X509 Store where the Certificate Exists, such as `My`.
         */
        x509StoreName: pulumi.Input<string>;
    }
    interface ClusterCertificateCommonNames {
        /**
         * A `commonNames` block as defined below.
         */
        commonNames: pulumi.Input<pulumi.Input<inputs.servicefabric.ClusterCertificateCommonNamesCommonName>[]>;
        /**
         * The X509 Store where the Certificate Exists, such as `My`.
         */
        x509StoreName: pulumi.Input<string>;
    }
    interface ClusterCertificateCommonNamesCommonName {
        /**
         * The common or subject name of the certificate.
         */
        certificateCommonName: pulumi.Input<string>;
        /**
         * The Issuer Thumbprint of the Certificate.
         *
         * > **Note:** Certificate Issuer Thumbprint may become required in the future, `https://docs.microsoft.com/azure/service-fabric/service-fabric-create-cluster-using-cert-cn#download-and-update-a-sample-template`.
         */
        certificateIssuerThumbprint?: pulumi.Input<string>;
    }
    interface ClusterClientCertificateCommonName {
        /**
         * The common or subject name of the certificate.
         */
        commonName: pulumi.Input<string>;
        /**
         * Does the Client Certificate have Admin Access to the cluster? Non-admin clients can only perform read only operations on the cluster.
         */
        isAdmin: pulumi.Input<boolean>;
        /**
         * The Issuer Thumbprint of the Certificate.
         *
         * > **Note:** Certificate Issuer Thumbprint may become required in the future, `https://docs.microsoft.com/azure/service-fabric/service-fabric-create-cluster-using-cert-cn#download-and-update-a-sample-template`.
         */
        issuerThumbprint?: pulumi.Input<string>;
    }
    interface ClusterClientCertificateThumbprint {
        /**
         * Does the Client Certificate have Admin Access to the cluster? Non-admin clients can only perform read only operations on the cluster.
         */
        isAdmin: pulumi.Input<boolean>;
        /**
         * The Thumbprint associated with the Client Certificate.
         */
        thumbprint: pulumi.Input<string>;
    }
    interface ClusterDiagnosticsConfig {
        /**
         * The Blob Endpoint of the Storage Account.
         */
        blobEndpoint: pulumi.Input<string>;
        /**
         * The protected diagnostics storage key name, such as `StorageAccountKey1`.
         */
        protectedAccountKeyName: pulumi.Input<string>;
        /**
         * The Queue Endpoint of the Storage Account.
         */
        queueEndpoint: pulumi.Input<string>;
        /**
         * The name of the Storage Account where the Diagnostics should be sent to.
         */
        storageAccountName: pulumi.Input<string>;
        /**
         * The Table Endpoint of the Storage Account.
         */
        tableEndpoint: pulumi.Input<string>;
    }
    interface ClusterFabricSetting {
        /**
         * The name of the Fabric Setting, such as `Security` or `Federation`.
         */
        name: pulumi.Input<string>;
        /**
         * A map containing settings for the specified Fabric Setting.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface ClusterNodeType {
        /**
         * A `applicationPorts` block as defined below.
         */
        applicationPorts?: pulumi.Input<inputs.servicefabric.ClusterNodeTypeApplicationPorts>;
        /**
         * The capacity tags applied to the nodes in the node type, the cluster resource manager uses these tags to understand how much resource a node has.
         */
        capacities?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Port used for the Client Endpoint for this Node Type.
         */
        clientEndpointPort: pulumi.Input<number>;
        /**
         * The Durability Level for this Node Type. Possible values include `Bronze`, `Gold` and `Silver`. Defaults to `Bronze`.
         */
        durabilityLevel?: pulumi.Input<string>;
        /**
         * A `ephemeralPorts` block as defined below.
         */
        ephemeralPorts?: pulumi.Input<inputs.servicefabric.ClusterNodeTypeEphemeralPorts>;
        /**
         * The Port used for the HTTP Endpoint for this Node Type.
         */
        httpEndpointPort: pulumi.Input<number>;
        /**
         * The number of nodes for this Node Type.
         */
        instanceCount: pulumi.Input<number>;
        /**
         * Is this the Primary Node Type?
         */
        isPrimary: pulumi.Input<boolean>;
        /**
         * Should this node type run only stateless services?
         */
        isStateless?: pulumi.Input<boolean>;
        /**
         * Does this node type span availability zones?
         */
        multipleAvailabilityZones?: pulumi.Input<boolean>;
        /**
         * The name of the Node Type.
         */
        name: pulumi.Input<string>;
        /**
         * The placement tags applied to nodes in the node type, which can be used to indicate where certain services (workload) should run.
         */
        placementProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The Port used for the Reverse Proxy Endpoint for this Node Type. Changing this will upgrade the cluster.
         */
        reverseProxyEndpointPort?: pulumi.Input<number>;
    }
    interface ClusterNodeTypeApplicationPorts {
        /**
         * The end of the Application Port Range on this Node Type.
         */
        endPort: pulumi.Input<number>;
        /**
         * The start of the Application Port Range on this Node Type.
         */
        startPort: pulumi.Input<number>;
    }
    interface ClusterNodeTypeEphemeralPorts {
        /**
         * The end of the Ephemeral Port Range on this Node Type.
         */
        endPort: pulumi.Input<number>;
        /**
         * The start of the Ephemeral Port Range on this Node Type.
         */
        startPort: pulumi.Input<number>;
    }
    interface ClusterReverseProxyCertificate {
        /**
         * The Thumbprint of the Certificate.
         */
        thumbprint: pulumi.Input<string>;
        /**
         * The Secondary Thumbprint of the Certificate.
         */
        thumbprintSecondary?: pulumi.Input<string>;
        /**
         * The X509 Store where the Certificate Exists, such as `My`.
         */
        x509StoreName: pulumi.Input<string>;
    }
    interface ClusterReverseProxyCertificateCommonNames {
        /**
         * A `commonNames` block as defined below.
         */
        commonNames: pulumi.Input<pulumi.Input<inputs.servicefabric.ClusterReverseProxyCertificateCommonNamesCommonName>[]>;
        /**
         * The X509 Store where the Certificate Exists, such as `My`.
         */
        x509StoreName: pulumi.Input<string>;
    }
    interface ClusterReverseProxyCertificateCommonNamesCommonName {
        /**
         * The common or subject name of the certificate.
         */
        certificateCommonName: pulumi.Input<string>;
        /**
         * The Issuer Thumbprint of the Certificate.
         *
         * > **Note:** Certificate Issuer Thumbprint may become required in the future, `https://docs.microsoft.com/azure/service-fabric/service-fabric-create-cluster-using-cert-cn#download-and-update-a-sample-template`.
         */
        certificateIssuerThumbprint?: pulumi.Input<string>;
    }
    interface ClusterUpgradePolicy {
        /**
         * A `deltaHealthPolicy` block as defined below
         */
        deltaHealthPolicy?: pulumi.Input<inputs.servicefabric.ClusterUpgradePolicyDeltaHealthPolicy>;
        /**
         * Indicates whether to restart the Service Fabric node even if only dynamic configurations have changed.
         */
        forceRestartEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, after which Service Fabric retries the health check if the previous health check fails. Defaults to `00:45:00`.
         */
        healthCheckRetryTimeout?: pulumi.Input<string>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, that Service Fabric waits in order to verify that the cluster is stable before it continues to the next upgrade domain or completes the upgrade. This wait duration prevents undetected changes of health right after the health check is performed. Defaults to `00:01:00`.
         */
        healthCheckStableDuration?: pulumi.Input<string>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, that Service Fabric waits before it performs the initial health check after it finishes the upgrade on the upgrade domain. Defaults to `00:00:30`.
         */
        healthCheckWaitDuration?: pulumi.Input<string>;
        /**
         * A `healthPolicy` block as defined below
         */
        healthPolicy?: pulumi.Input<inputs.servicefabric.ClusterUpgradePolicyHealthPolicy>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, that Service Fabric takes to upgrade a single upgrade domain. After this period, the upgrade fails. Defaults to `02:00:00`.
         */
        upgradeDomainTimeout?: pulumi.Input<string>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, that Service Fabric waits for a replica set to reconfigure into a safe state, if it is not already in a safe state, before Service Fabric proceeds with the upgrade. Defaults to `10675199.02:48:05.4775807`.
         */
        upgradeReplicaSetCheckTimeout?: pulumi.Input<string>;
        /**
         * Specifies the duration, in "hh:mm:ss" string format, that Service Fabric takes for the entire upgrade. After this period, the upgrade fails. Defaults to `12:00:00`.
         */
        upgradeTimeout?: pulumi.Input<string>;
    }
    interface ClusterUpgradePolicyDeltaHealthPolicy {
        /**
         * Specifies the maximum tolerated percentage of delta unhealthy applications that can have aggregated health states of error. If the current unhealthy applications do not respect the percentage relative to the state at the beginning of the upgrade, the cluster is unhealthy. Defaults to `0`.
         */
        maxDeltaUnhealthyApplicationsPercent?: pulumi.Input<number>;
        /**
         * Specifies the maximum tolerated percentage of delta unhealthy nodes that can have aggregated health states of error. If the current unhealthy nodes do not respect the percentage relative to the state at the beginning of the upgrade, the cluster is unhealthy. Defaults to `0`.
         */
        maxDeltaUnhealthyNodesPercent?: pulumi.Input<number>;
        /**
         * Specifies the maximum tolerated percentage of upgrade domain delta unhealthy nodes that can have aggregated health state of error. If there is any upgrade domain where the current unhealthy nodes do not respect the percentage relative to the state at the beginning of the upgrade, the cluster is unhealthy. Defaults to `0`.
         */
        maxUpgradeDomainDeltaUnhealthyNodesPercent?: pulumi.Input<number>;
    }
    interface ClusterUpgradePolicyHealthPolicy {
        /**
         * Specifies the maximum tolerated percentage of applications that can have aggregated health state of error. If the upgrade exceeds this percentage, the cluster is unhealthy. Defaults to `0`.
         */
        maxUnhealthyApplicationsPercent?: pulumi.Input<number>;
        /**
         * Specifies the maximum tolerated percentage of nodes that can have aggregated health states of error. If an upgrade exceeds this percentage, the cluster is unhealthy. Defaults to `0`.
         */
        maxUnhealthyNodesPercent?: pulumi.Input<number>;
    }
    interface ManagedClusterAuthentication {
        /**
         * A `activeDirectory` block as defined above.
         */
        activeDirectory?: pulumi.Input<inputs.servicefabric.ManagedClusterAuthenticationActiveDirectory>;
        /**
         * One or more `certificate` blocks as defined below.
         */
        certificates?: pulumi.Input<pulumi.Input<inputs.servicefabric.ManagedClusterAuthenticationCertificate>[]>;
    }
    interface ManagedClusterAuthenticationActiveDirectory {
        /**
         * The ID of the Client Application.
         */
        clientApplicationId: pulumi.Input<string>;
        /**
         * The ID of the Cluster Application.
         */
        clusterApplicationId: pulumi.Input<string>;
        /**
         * The ID of the Tenant.
         */
        tenantId: pulumi.Input<string>;
    }
    interface ManagedClusterAuthenticationCertificate {
        /**
         * The certificate's CN.
         */
        commonName?: pulumi.Input<string>;
        /**
         * The thumbprint of the certificate.
         */
        thumbprint: pulumi.Input<string>;
        /**
         * The type of the certificate. Can be `AdminClient` or `ReadOnlyClient`.
         */
        type: pulumi.Input<string>;
    }
    interface ManagedClusterCustomFabricSetting {
        /**
         * Parameter name.
         */
        parameter: pulumi.Input<string>;
        /**
         * Section name.
         */
        section: pulumi.Input<string>;
        /**
         * Parameter value.
         */
        value: pulumi.Input<string>;
    }
    interface ManagedClusterLbRule {
        /**
         * LB Backend port.
         */
        backendPort: pulumi.Input<number>;
        /**
         * LB Frontend port.
         */
        frontendPort: pulumi.Input<number>;
        /**
         * Protocol for the probe. Can be one of `tcp`, `udp`, `http`, or `https`.
         */
        probeProtocol: pulumi.Input<string>;
        /**
         * Path for the probe to check, when probe protocol is set to `http`.
         */
        probeRequestPath?: pulumi.Input<string>;
        /**
         * The transport protocol used in this rule. Can be one of `tcp` or `udp`.
         */
        protocol: pulumi.Input<string>;
    }
    interface ManagedClusterNodeType {
        /**
         * Sets the port range available for applications. Format is `<from_port>-<to_port>`, for example `10000-20000`.
         */
        applicationPortRange: pulumi.Input<string>;
        /**
         * Specifies a list of key/value pairs used to set capacity tags for this node type.
         */
        capacities?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * The size of the data disk in gigabytes..
         */
        dataDiskSizeGb: pulumi.Input<number>;
        /**
         * The type of the disk to use for storing data. It can be one of `Premium_LRS`, `Standard_LRS`, or `StandardSSD_LRS`. Defaults to `Standard_LRS`.
         */
        dataDiskType?: pulumi.Input<string>;
        /**
         * Sets the port range available for the OS. Format is `<from_port>-<to_port>`, for example `10000-20000`. There has to be at least 255 ports available and cannot overlap with `applicationPortRange`..
         */
        ephemeralPortRange: pulumi.Input<string>;
        /**
         * The ID of the Resource Group.
         */
        id?: pulumi.Input<string>;
        /**
         * If set the node type can be composed of multiple placement groups.
         */
        multiplePlacementGroupsEnabled?: pulumi.Input<boolean>;
        /**
         * The name which should be used for this node type.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies a list of placement tags that can be used to indicate where services should run..
         */
        placementProperties?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
        /**
         * If set to true, system services will run on this node type. Only one node type should be marked as primary. Primary node type cannot be deleted or changed once they're created.
         */
        primary?: pulumi.Input<boolean>;
        /**
         * If set to true, only stateless workloads can run on this node type.
         */
        stateless?: pulumi.Input<boolean>;
        /**
         * The offer type of the marketplace image cluster VMs will use.
         */
        vmImageOffer: pulumi.Input<string>;
        /**
         * The publisher of the marketplace image cluster VMs will use.
         */
        vmImagePublisher: pulumi.Input<string>;
        /**
         * The SKU of the marketplace image cluster VMs will use.
         */
        vmImageSku: pulumi.Input<string>;
        /**
         * The version of the marketplace image cluster VMs will use.
         */
        vmImageVersion: pulumi.Input<string>;
        /**
         * The number of instances this node type will launch.
         */
        vmInstanceCount: pulumi.Input<number>;
        /**
         * One or more `vmSecrets` blocks as defined below.
         */
        vmSecrets?: pulumi.Input<pulumi.Input<inputs.servicefabric.ManagedClusterNodeTypeVmSecret>[]>;
        /**
         * The size of the instances in this node type.
         */
        vmSize: pulumi.Input<string>;
    }
    interface ManagedClusterNodeTypeVmSecret {
        /**
         * One or more `certificates` blocks as defined above.
         */
        certificates: pulumi.Input<pulumi.Input<inputs.servicefabric.ManagedClusterNodeTypeVmSecretCertificate>[]>;
        /**
         * The ID of the Vault that contain the certificates.
         */
        vaultId: pulumi.Input<string>;
    }
    interface ManagedClusterNodeTypeVmSecretCertificate {
        /**
         * The certificate store on the Virtual Machine to which the certificate should be added.
         */
        store: pulumi.Input<string>;
        /**
         * The URL of a certificate that has been uploaded to Key Vault as a secret
         */
        url: pulumi.Input<string>;
    }
}
export declare namespace signalr {
    interface ServiceCor {
        /**
         * A list of origins which should be able to make cross-origin calls. `*` can be used to allow all calls.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ServiceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this signalR.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this signalR. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ServiceLiveTrace {
        /**
         * Whether the log category `ConnectivityLogs` is enabled? Defaults to `true`
         */
        connectivityLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Whether the live trace is enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Whether the log category `HttpRequestLogs` is enabled? Defaults to `true`
         */
        httpRequestLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Whether the log category `MessagingLogs` is enabled? Defaults to `true`
         */
        messagingLogsEnabled?: pulumi.Input<boolean>;
    }
    interface ServiceNetworkAclPrivateEndpoint {
        /**
         * The allowed request types for the Private Endpoint Connection. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Allow`, `allowedRequestTypes`cannot be set.
         */
        allowedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The denied request types for the Private Endpoint Connection. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Deny`, `deniedRequestTypes`cannot be set.
         *
         * > **Note:** `allowedRequestTypes` - (Optional) and `deniedRequestTypes` cannot be set together.
         */
        deniedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Private Endpoint which is based on the SignalR service.
         */
        id: pulumi.Input<string>;
    }
    interface ServiceNetworkAclPublicNetwork {
        /**
         * The allowed request types for the public network. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Allow`, `allowedRequestTypes`cannot be set.
         */
        allowedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The denied request types for the public network. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Deny`, `deniedRequestTypes`cannot be set.
         *
         * > **Note:** `allowedRequestTypes` - (Optional) and `deniedRequestTypes` cannot be set together.
         */
        deniedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ServiceSku {
        /**
         * Specifies the number of units associated with this SignalR service. Valid values are `1`, `2`, `3`, `4`, `5`, `6`, `7`, `8`, `9`, `10`, `20`, `30`, `40`, `50`, `60`, `70`, `80`, `90`, `100`, `200`, `300`, `400`, `500`, `600`, `700`, `800`, `900` and `1000`.
         *
         * > **Note:** The valid capacity range for sku `Free_F1` is `1`, for sku `Premium_P2` is from `100` to `1000`, and from `1` to `100` for sku `Standard_S1` and `Premium_P1`.
         */
        capacity: pulumi.Input<number>;
        /**
         * Specifies which tier to use. Valid values are `Free_F1`, `Standard_S1`, `Premium_P1` and `Premium_P2`.
         */
        name: pulumi.Input<string>;
    }
    interface ServiceUpstreamEndpoint {
        /**
         * The categories to match on, or `*` for all.
         */
        categoryPatterns: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The events to match on, or `*` for all.
         */
        eventPatterns: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The hubs to match on, or `*` for all.
         */
        hubPatterns: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The upstream URL Template. This can be a url or a template such as `http://host.com/{hub}/api/{category}/{event}`.
         */
        urlTemplate: pulumi.Input<string>;
        /**
         * Specifies the Managed Identity IDs to be assigned to this signalR upstream setting by using resource uuid as both system assigned and user assigned identity is supported.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
}
export declare namespace siterecovery {
    interface ProtectionContainerMappingAutomaticUpdate {
        /**
         * The authentication type used for automation account. Possible values are `RunAsAccount` and `SystemAssignedIdentity`. Defaults to `SystemAssignedIdentity`.
         *
         * > **Note:** `RunAsAccount` of `authenticationType` is deprecated and will retire on September 30, 2023. Details could be found [here](https://learn.microsoft.com/en-us/azure/automation/whats-new#support-for-run-as-accounts).
         */
        authenticationType?: pulumi.Input<string>;
        /**
         * The automation account ID which holds the automatic update runbook and authenticates to Azure resources.
         *
         * > **Note:** `automationAccountId` is required when `enabled` is specified.
         */
        automationAccountId?: pulumi.Input<string>;
        /**
         * Should the Mobility service installed on Azure virtual machines be automatically updated. Defaults to `false`.
         *
         * > **Note:** The setting applies to all Azure VMs protected in the same container. For more details see [this document](https://learn.microsoft.com/en-us/azure/site-recovery/azure-to-azure-autoupdate#enable-automatic-updates)
         */
        enabled?: pulumi.Input<boolean>;
    }
    interface ReplicatedVMManagedDisk {
        /**
         * Id of disk that should be replicated. Changing this forces a new resource to be created.
         */
        diskId: pulumi.Input<string>;
        /**
         * Storage account that should be used for caching. Changing this forces a new resource to be created.
         */
        stagingStorageAccountId: pulumi.Input<string>;
        /**
         * A `targetDiskEncryption` block as defined below.
         */
        targetDiskEncryption?: pulumi.Input<inputs.siterecovery.ReplicatedVMManagedDiskTargetDiskEncryption>;
        /**
         * The Disk Encryption Set that the Managed Disk will be associated with. Changing this forces a new resource to be created.
         *
         * > **Note:** Creating replicated vm with `targetDiskEncryptionSetId` wil take more time (up to 5 hours), please extend the `timeout` for `create`.
         */
        targetDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * What type should the disk be when a failover is done. Possible values are `Standard_LRS`, `Premium_LRS`, `PremiumV2_LRS`, `StandardSSD_LRS`, `UltraSSD_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         */
        targetDiskType: pulumi.Input<string>;
        /**
         * What type should the disk be that holds the replication data. Possible values are `Standard_LRS`, `Premium_LRS`, `PremiumV2_LRS`, `StandardSSD_LRS`, `UltraSSD_LRS`, `StandardSSD_ZRS` and `Premium_ZRS`. Changing this forces a new resource to be created.
         */
        targetReplicaDiskType: pulumi.Input<string>;
        /**
         * Resource group disk should belong to when a failover is done. Changing this forces a new resource to be created.
         */
        targetResourceGroupId: pulumi.Input<string>;
    }
    interface ReplicatedVMManagedDiskTargetDiskEncryption {
        /**
         * A `diskEncryptionKey` block as defined below.
         */
        diskEncryptionKey: pulumi.Input<inputs.siterecovery.ReplicatedVMManagedDiskTargetDiskEncryptionDiskEncryptionKey>;
        /**
         * A `keyEncryptionKey` block as defined below.
         */
        keyEncryptionKey?: pulumi.Input<inputs.siterecovery.ReplicatedVMManagedDiskTargetDiskEncryptionKeyEncryptionKey>;
    }
    interface ReplicatedVMManagedDiskTargetDiskEncryptionDiskEncryptionKey {
        /**
         * The URL to the Key Vault Secret used as the Disk Encryption Key that the Managed Disk will be associated with. This can be found as `id` on the `azure.keyvault.Secret` resource. Changing this forces a new resource to be created.
         */
        secretUrl: pulumi.Input<string>;
        /**
         * The ID of the Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource. Changing this forces a new resource to be created.
         */
        vaultId: pulumi.Input<string>;
    }
    interface ReplicatedVMManagedDiskTargetDiskEncryptionKeyEncryptionKey {
        /**
         * The URL to the Key Vault Key used as the Key Encryption Key that the Managed Disk will be associated with. This can be found as `id` on the `azure.keyvault.Key` resource. Changing this forces a new resource to be created.
         */
        keyUrl: pulumi.Input<string>;
        /**
         * The ID of the Key Vault. This can be found as `id` on the `azure.keyvault.KeyVault` resource. Changing this forces a new resource to be created.
         */
        vaultId: pulumi.Input<string>;
    }
    interface ReplicatedVMNetworkInterface {
        /**
         * Id of the public IP object to use when a test failover is done.
         */
        failoverTestPublicIpAddressId?: pulumi.Input<string>;
        /**
         * Static IP to assign when a test failover is done.
         */
        failoverTestStaticIp?: pulumi.Input<string>;
        /**
         * Name of the subnet to use when a test failover is done.
         */
        failoverTestSubnetName?: pulumi.Input<string>;
        /**
         * A list of IDs of Load Balancer Backend Address Pools to use when a failover is done.
         */
        recoveryLoadBalancerBackendAddressPoolIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Id of the public IP object to use when a failover is done.
         */
        recoveryPublicIpAddressId?: pulumi.Input<string>;
        /**
         * (Required if the networkInterface block is specified) Id source network interface.
         */
        sourceNetworkInterfaceId?: pulumi.Input<string>;
        /**
         * Static IP to assign when a failover is done.
         */
        targetStaticIp?: pulumi.Input<string>;
        /**
         * Name of the subnet to use when a failover is done.
         */
        targetSubnetName?: pulumi.Input<string>;
    }
    interface ReplicatedVMUnmanagedDisk {
        /**
         * Id of disk that should be replicated. Changing this forces a new resource to be created.
         */
        diskUri: pulumi.Input<string>;
        /**
         * Storage account that should be used for caching. Changing this forces a new resource to be created.
         */
        stagingStorageAccountId: pulumi.Input<string>;
        /**
         * Storage account disk should belong to when a failover is done. Changing this forces a new resource to be created.
         */
        targetStorageAccountId: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanAzureToAzureSettings {
        /**
         * The Edge Zone within the Azure Region where the VM exists. Changing this forces a new Site Recovery Replication Recovery Plan to be created.
         */
        primaryEdgeZone?: pulumi.Input<string>;
        /**
         * The Availability Zone in which the VM is located. Changing this forces a new Site Recovery Replication Recovery Plan to be created.
         */
        primaryZone?: pulumi.Input<string>;
        /**
         * The Edge Zone within the Azure Region where the VM is recovered. Changing this forces a new Site Recovery Replication Recovery Plan to be created.
         *
         * > **Note:** `primaryEdgeZone` and `recoveryEdgeZone` must be specified together.
         */
        recoveryEdgeZone?: pulumi.Input<string>;
        /**
         * The Availability Zone in which the VM is recovered. Changing this forces a new Site Recovery Replication Recovery Plan to be created.
         *
         * > **Note:** `primaryZone` and `recoveryZone` must be specified together.
         */
        recoveryZone?: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanBootRecoveryGroup {
        /**
         * one or more `action` block as defined below. which will be executed after the group recovery.
         */
        postActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanBootRecoveryGroupPostAction>[]>;
        /**
         * one or more `action` block as defined below. which will be executed before the group recovery.
         */
        preActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanBootRecoveryGroupPreAction>[]>;
        /**
         * One or more protected VM IDs.
         */
        replicatedProtectedItems?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ReplicationRecoveryPlanBootRecoveryGroupPostAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanBootRecoveryGroupPreAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanFailoverRecoveryGroup {
        /**
         * one or more `action` block as defined below. which will be executed after the group recovery.
         */
        postActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanFailoverRecoveryGroupPostAction>[]>;
        /**
         * one or more `action` block as defined below. which will be executed before the group recovery.
         */
        preActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanFailoverRecoveryGroupPreAction>[]>;
    }
    interface ReplicationRecoveryPlanFailoverRecoveryGroupPostAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanFailoverRecoveryGroupPreAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanShutdownRecoveryGroup {
        /**
         * one or more `action` block as defined below. which will be executed after the group recovery.
         */
        postActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanShutdownRecoveryGroupPostAction>[]>;
        /**
         * one or more `action` block as defined below. which will be executed before the group recovery.
         */
        preActions?: pulumi.Input<pulumi.Input<inputs.siterecovery.ReplicationRecoveryPlanShutdownRecoveryGroupPreAction>[]>;
    }
    interface ReplicationRecoveryPlanShutdownRecoveryGroupPostAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface ReplicationRecoveryPlanShutdownRecoveryGroupPreAction {
        /**
         * The fabric location of runbook or script. Possible values are `Primary` and `Recovery`. It must not be specified when `type` is `ManualActionDetails`.
         *
         * > **Note:** This is required when `type` is set to `AutomationRunbookActionDetails` or `ScriptActionDetails`.
         */
        fabricLocation?: pulumi.Input<string>;
        /**
         * Directions of fail over. Possible values are `PrimaryToRecovery` and `RecoveryToPrimary`
         */
        failOverDirections: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Types of fail over. Possible values are `TestFailover`, `PlannedFailover` and `UnplannedFailover`
         */
        failOverTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Instructions of manual action.
         *
         * > **Note:** This property is required when `type` is set to `ManualActionDetails`.
         */
        manualActionInstruction?: pulumi.Input<string>;
        /**
         * The name of the Replication Plan. The name can contain only letters, numbers, and hyphens. It should start with a letter and end with a letter or a number. Can be a maximum of 63 characters. Changing this forces a new resource to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Id of runbook.
         *
         * > **Note:** This property is required when `type` is set to `AutomationRunbookActionDetails`.
         */
        runbookId?: pulumi.Input<string>;
        /**
         * Path of action script.
         *
         * > **Note:** This property is required when `type` is set to `ScriptActionDetails`.
         */
        scriptPath?: pulumi.Input<string>;
        /**
         * Type of the action detail. Possible values are `AutomationRunbookActionDetails`, `ManualActionDetails` and `ScriptActionDetails`.
         */
        type: pulumi.Input<string>;
    }
    interface VmwareReplicatedVmManagedDisk {
        /**
         * The ID of the disk to be replicated.
         */
        diskId: pulumi.Input<string>;
        /**
         * The ID of the storage account that should be used for logging during replication.
         */
        logStorageAccountId?: pulumi.Input<string>;
        /**
         * The ID of the Disk Encryption Set that should be used for the disks when a failover is done.
         */
        targetDiskEncryptionSetId?: pulumi.Input<string>;
        /**
         * The disk type of the disk to be created when a failover is done. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`.
         */
        targetDiskType: pulumi.Input<string>;
    }
    interface VmwareReplicatedVmNetworkInterface {
        /**
         * Whether this `networkInterface` is primary for the replicated VM.
         */
        isPrimary: pulumi.Input<boolean>;
        /**
         * Mac address of the network interface of source VM.
         */
        sourceMacAddress: pulumi.Input<string>;
        /**
         * Static IP to assign when a failover is done.
         */
        targetStaticIp?: pulumi.Input<string>;
        /**
         * Name of the subnet to use when a failover is done.
         */
        targetSubnetName?: pulumi.Input<string>;
        /**
         * Name of the subnet to use when a test failover is done.
         */
        testSubnetName?: pulumi.Input<string>;
    }
}
export declare namespace stack {
    interface HciClusterIdentity {
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID of the Azure Active Directory which is used by the Azure Stack HCI Cluster. Changing this forces a new resource to be created.
         *
         * > **Note:** If unspecified the Tenant ID of the Provider will be used.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on the Azure Stack HCI Cluster. Possible value is `SystemAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnit {
        /**
         * Specify the full name of the Active Directory Organizational Unit container object prepared for the deployment, including the domain components. For example:`OU=HCI01,DC=contoso,DC=com`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        activeDirectoryOrganizationalUnitPath: pulumi.Input<string>;
        /**
         * Whether to enable BitLocker for boot volume. Possible values are `true` and `false`. When set to `true`, BitLocker XTS_AES 256-bit encryption is enabled for all data-at-rest on the OS volume of your Azure Stack HCI cluster. This setting is TPM-hardware dependent. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        bitlockerBootVolumeEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable BitLocker for data volume. Possible values are `true` and `false`. When set to `true`, BitLocker XTS-AES 256-bit encryption is enabled for all data-at-rest on your Azure Stack HCI cluster shared volumes. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        bitlockerDataVolumeEnabled?: pulumi.Input<boolean>;
        /**
         * A `cluster` block as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        cluster: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitCluster>;
        /**
         * Whether to enable credential guard. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        credentialGuardEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies the FQDN for deploying cluster. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        domainFqdn: pulumi.Input<string>;
        /**
         * Whether to enable drift control. Possible values are `true` and `false`. When set to `true`, the security baseline is re-applied regularly. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        driftControlEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable DRTM protection. Possible values are `true` and `false`. When set to `true`, Secure Boot is enabled on your Azure HCI cluster. This setting is hardware dependent. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        drtmProtectionEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to collect log data to facilitate quicker issue resolution. Possible values are `true` and `false`. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        episodicDataUploadEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to store data sent to Microsoft in EU. The log and diagnostic data is sent to the appropriate diagnostics servers depending upon where your cluster resides. Setting this to `false` results in all data sent to Microsoft to be stored outside of the EU. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        euLocationEnabled?: pulumi.Input<boolean>;
        /**
         * A `hostNetwork` block as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        hostNetwork: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetwork>;
        /**
         * Whether to enable HVCI protection. Possible values are `true` and `false`. When set to `true`, Hypervisor-protected Code Integrity is enabled on your Azure HCI cluster. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        hvciProtectionEnabled?: pulumi.Input<boolean>;
        /**
         * One or more `infrastructureNetwork` blocks as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        infrastructureNetworks: pulumi.Input<pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitInfrastructureNetwork>[]>;
        /**
         * Specifies the name prefix to deploy cluster. It must be 1-8 characters long and contain only letters, numbers and hyphens Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        namePrefix: pulumi.Input<string>;
        /**
         * A `optionalService` block as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        optionalService: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitOptionalService>;
        /**
         * One or more `physicalNode` blocks as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        physicalNodes: pulumi.Input<pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitPhysicalNode>[]>;
        /**
         * The URI to the Key Vault or secret store. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        secretsLocation: pulumi.Input<string>;
        /**
         * Whether to enable side channel mitigation. Possible values are `true` and `false`. When set to `true`, all side channel mitigations are enabled on your Azure HCI cluster. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        sideChannelMitigationEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable SMB cluster encryption. Possible values are `true` and `false`. When set to `true`, cluster east-west traffic is encrypted. Defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        smbClusterEncryptionEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable SMB signing. Possible values are `true` and `false`. When set to `true`, the SMB default instance requires sign in for the client and server services. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        smbSigningEnabled?: pulumi.Input<boolean>;
        /**
         * A `storage` block as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        storage: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitStorage>;
        /**
         * Whether the telemetry data will be sent to Microsoft. Possible values are `true` and `false`. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        streamingDataClientEnabled?: pulumi.Input<boolean>;
        /**
         * Whether to enable WDAC. Possible values are `true` and `false`. When set to `true`, applications and the code that you can run on your Azure Stack HCI cluster are limited. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        wdacEnabled?: pulumi.Input<boolean>;
    }
    interface HciDeploymentSettingScaleUnitCluster {
        /**
         * Specifies the Azure blob service endpoint, for example, `core.windows.net`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        azureServiceEndpoint: pulumi.Input<string>;
        /**
         * Specifies the Azure Storage account name of the cloud witness for the Azure Stack HCI cluster. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        cloudAccountName: pulumi.Input<string>;
        /**
         * Specifies the name of the cluster. It must be 3-15 characters long and contain only letters, numbers and hyphens. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        name: pulumi.Input<string>;
        /**
         * Specifies the fileshare path of the local witness for the Azure Stack HCI cluster. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        witnessPath: pulumi.Input<string>;
        /**
         * Specifies the type of the witness. Possible values are `Cloud`, `FileShare`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        witnessType: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitHostNetwork {
        /**
         * One or more `intent` blocks as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        intents: pulumi.Input<pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetworkIntent>[]>;
        /**
         * Whether allows users to specify IPs and Mask for Storage NICs when Network ATC is not assigning the IPs for storage automatically. Optional parameter required only for [3 nodes switchless deployments](https://learn.microsoft.com/azure-stack/hci/concepts/physical-network-requirements?tabs=overview%2C23H2reqs#using-switchless). Possible values are `true` and `false`. Defaults to `true`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        storageAutoIpEnabled?: pulumi.Input<boolean>;
        /**
         * Defines how the storage adapters between nodes are connected either switch or switch less. Possible values are `true` and `false`. Defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        storageConnectivitySwitchlessEnabled?: pulumi.Input<boolean>;
        /**
         * One or more `storageNetwork` blocks as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        storageNetworks: pulumi.Input<pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetworkStorageNetwork>[]>;
    }
    interface HciDeploymentSettingScaleUnitHostNetworkIntent {
        /**
         * A `adapterPropertyOverride` block as defined above. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        adapterPropertyOverride?: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetworkIntentAdapterPropertyOverride>;
        /**
         * Whether to override adapter properties. Possible values are `true` and `false`. defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        adapterPropertyOverrideEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies a list of ID of network interfaces used for the network intent. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        adapters: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the name of the intent. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        name: pulumi.Input<string>;
        /**
         * A `qosPolicyOverride` block as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        qosPolicyOverride?: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetworkIntentQosPolicyOverride>;
        /**
         * Whether to override QoS policy. Possible values are `true` and `false`. defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        qosPolicyOverrideEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies a list of network traffic types. Possible values are `Compute`, `Storage`, `Management`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        trafficTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `virtualSwitchConfigurationOverride` block as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        virtualSwitchConfigurationOverride?: pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitHostNetworkIntentVirtualSwitchConfigurationOverride>;
        /**
         * Whether to override virtual switch configuration. Possible values are `true` and `false`. defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        virtualSwitchConfigurationOverrideEnabled?: pulumi.Input<boolean>;
    }
    interface HciDeploymentSettingScaleUnitHostNetworkIntentAdapterPropertyOverride {
        /**
         * The jumbo frame size of the adapter. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        jumboPacket?: pulumi.Input<string>;
        /**
         * The network direct of the adapter. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        networkDirect?: pulumi.Input<string>;
        /**
         * The network direct technology of the adapter. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        networkDirectTechnology?: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitHostNetworkIntentQosPolicyOverride {
        /**
         * Specifies the percentage of the allocated storage traffic bandwidth. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        bandwidthPercentageSmb?: pulumi.Input<string>;
        /**
         * Specifies the Cluster traffic priority. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        priorityValue8021ActionCluster?: pulumi.Input<string>;
        /**
         * Specifies the Priority Flow Control where Data Center Bridging (DCB) is used. This parameter should only be modified based on your OEM guidance. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        priorityValue8021ActionSmb?: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitHostNetworkIntentVirtualSwitchConfigurationOverride {
        /**
         * Specifies the IoV enable status for Virtual Switch. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        enableIov?: pulumi.Input<string>;
        /**
         * Specifies the load balancing algorithm for Virtual Switch. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        loadBalancingAlgorithm?: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitHostNetworkStorageNetwork {
        /**
         * The name of the storage network. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        name: pulumi.Input<string>;
        /**
         * The name of the network adapter. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        networkAdapterName: pulumi.Input<string>;
        /**
         * Specifies the ID for the VLAN storage network. This setting is applied to the network interfaces that route the storage and VM migration traffic. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        vlanId: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitInfrastructureNetwork {
        /**
         * Whether DHCP is enabled for hosts and cluster IPs. Possible values are `true` and `false`. defaults to `false`. Changing this forces a new Stack HCI Deployment Setting to be created.
         *
         * > **Note:** If `dhcpEnabled` is set to `false`, the deployment will use static IPs. If set to `true`, the gateway and DNS servers are not required.
         */
        dhcpEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies a list of IPv4 addresses of the DNS servers in your environment. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        dnsServers: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the default gateway that should be used for the provided IP address space. It should be in the format of an IPv4 IP address. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        gateway: pulumi.Input<string>;
        /**
         * One or more `ipPool` blocks as defined below. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        ipPools: pulumi.Input<pulumi.Input<inputs.stack.HciDeploymentSettingScaleUnitInfrastructureNetworkIpPool>[]>;
        /**
         * Specifies the subnet mask that matches the provided IP address space. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        subnetMask: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitInfrastructureNetworkIpPool {
        /**
         * Specifies starting IP address for the management network. A minimum of six free, contiguous IPv4 addresses (excluding your host IPs) are needed for infrastructure services such as clustering. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        endingAddress: pulumi.Input<string>;
        /**
         * Specifies ending IP address for the management network. A minimum of six free, contiguous IPv4 addresses (excluding your host IPs) are needed for infrastructure services such as clustering. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        startingAddress: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitOptionalService {
        /**
         * Specifies the name of custom location. A custom location will be created after the deployment is completed. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        customLocation: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitPhysicalNode {
        /**
         * Specifies the IPv4 address assigned to each physical server on your Azure Stack HCI cluster. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        ipv4Address: pulumi.Input<string>;
        /**
         * The NETBIOS name of each physical server on your Azure Stack HCI cluster. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        name: pulumi.Input<string>;
    }
    interface HciDeploymentSettingScaleUnitStorage {
        /**
         * The configuration mode of storage. If set to `Express` and your storage is configured as per best practices based on the number of nodes in the cluster. Possible values are `Express`, `InfraOnly` and `KeepStorage`. Changing this forces a new Stack HCI Deployment Setting to be created.
         */
        configurationMode: pulumi.Input<string>;
    }
    interface HciLogicalNetworkSubnet {
        /**
         * The address prefix in CIDR notation. Changing this forces a new resource to be created.
         */
        addressPrefix?: pulumi.Input<string>;
        /**
         * The IP address allocation method for the subnet. Possible values are `Dynamic` and `Static`. Changing this forces a new resource to be created.
         */
        ipAllocationMethod: pulumi.Input<string>;
        /**
         * One or more `ipPool` block as defined above. Changing this forces a new resource to be created.
         *
         * > **Note:** If `ipPool` is not specified, it will be assigned by the server. If you experience a diff you may need to add this to `ignoreChanges`.
         */
        ipPools?: pulumi.Input<pulumi.Input<inputs.stack.HciLogicalNetworkSubnetIpPool>[]>;
        /**
         * A `route` block as defined above. Changing this forces a new resource to be created.
         */
        routes?: pulumi.Input<pulumi.Input<inputs.stack.HciLogicalNetworkSubnetRoute>[]>;
        /**
         * The VLAN ID for the Logical Network. Changing this forces a new resource to be created.
         */
        vlanId?: pulumi.Input<number>;
    }
    interface HciLogicalNetworkSubnetIpPool {
        /**
         * The IPv4 address of the end of the IP address pool. Changing this forces a new resource to be created.
         */
        end: pulumi.Input<string>;
        /**
         * The IPv4 address of the start of the IP address pool. Changing this forces a new resource to be created.
         */
        start: pulumi.Input<string>;
    }
    interface HciLogicalNetworkSubnetRoute {
        /**
         * The Address in CIDR notation. Changing this forces a new resource to be created.
         */
        addressPrefix: pulumi.Input<string>;
        /**
         * The name of the route. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
        /**
         * The IPv4 address of the next hop. Changing this forces a new resource to be created.
         */
        nextHopIpAddress: pulumi.Input<string>;
    }
    interface HciMarketplaceGalleryImageIdentifier {
        /**
         * The offer of the Azure Stack HCI Marketplace Gallery Image. Changing this forces a new Azure Stack HCI Marketplace Gallery Image to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The publisher of the Azure Stack HCI Marketplace Gallery Image. Changing this forces a new Azure Stack HCI Marketplace Gallery Image to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The sku of the Azure Stack HCI Marketplace Gallery Image. Changing this forces a new Azure Stack HCI Marketplace Gallery Image to be created.
         */
        sku: pulumi.Input<string>;
    }
    interface HciNetworkInterfaceIpConfiguration {
        /**
         * The IPv4 address of the gateway for the Network Interface.
         */
        gateway?: pulumi.Input<string>;
        /**
         * The prefix length for the address of the Network Interface.
         */
        prefixLength?: pulumi.Input<string>;
        /**
         * The IPv4 address of the IP configuration. Changing this forces a new resource to be created.
         */
        privateIpAddress?: pulumi.Input<string>;
        /**
         * The resource ID of the Stack HCI Logical Network bound to the IP configuration. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
    }
}
export declare namespace storage {
    interface AccountAzureFilesAuthentication {
        /**
         * A `activeDirectory` block as defined below. Required when `directoryType` is `AD`.
         */
        activeDirectory?: pulumi.Input<inputs.storage.AccountAzureFilesAuthenticationActiveDirectory>;
        /**
         * Specifies the default share level permissions applied to all users. Possible values are `StorageFileDataSmbShareReader`, `StorageFileDataSmbShareContributor`, `StorageFileDataSmbShareElevatedContributor`, or `None`. Defaults to `None`.
         */
        defaultShareLevelPermission?: pulumi.Input<string>;
        /**
         * Specifies the directory service used. Possible values are `AADDS`, `AD` and `AADKERB`.
         */
        directoryType: pulumi.Input<string>;
    }
    interface AccountAzureFilesAuthenticationActiveDirectory {
        /**
         * Specifies the domain GUID.
         */
        domainGuid: pulumi.Input<string>;
        /**
         * Specifies the primary domain that the AD DNS server is authoritative for.
         */
        domainName: pulumi.Input<string>;
        /**
         * Specifies the security identifier (SID). This is required when `directoryType` is set to `AD`.
         */
        domainSid?: pulumi.Input<string>;
        /**
         * Specifies the Active Directory forest. This is required when `directoryType` is set to `AD`.
         */
        forestName?: pulumi.Input<string>;
        /**
         * Specifies the NetBIOS domain name. This is required when `directoryType` is set to `AD`.
         */
        netbiosDomainName?: pulumi.Input<string>;
        /**
         * Specifies the security identifier (SID) for Azure Storage. This is required when `directoryType` is set to `AD`.
         */
        storageSid?: pulumi.Input<string>;
    }
    interface AccountBlobProperties {
        /**
         * Is the blob service properties for change feed events enabled? Default to `false`.
         *
         * > **Note:** This field cannot be configured when `kind` is set to `Storage` (V1).
         */
        changeFeedEnabled?: pulumi.Input<boolean>;
        /**
         * The duration of change feed events retention in days. The possible values are between 1 and 146000 days (400 years). Setting this to null (or omit this in the configuration file) indicates an infinite retention of the change feed.
         *
         * > **Note:** This field cannot be configured when `kind` is set to `Storage` (V1).
         */
        changeFeedRetentionInDays?: pulumi.Input<number>;
        /**
         * A `containerDeleteRetentionPolicy` block as defined below.
         */
        containerDeleteRetentionPolicy?: pulumi.Input<inputs.storage.AccountBlobPropertiesContainerDeleteRetentionPolicy>;
        /**
         * A `corsRule` block as defined below.
         */
        corsRules?: pulumi.Input<pulumi.Input<inputs.storage.AccountBlobPropertiesCorsRule>[]>;
        /**
         * The API Version which should be used by default for requests to the Data Plane API if an incoming request doesn't specify an API Version.
         */
        defaultServiceVersion?: pulumi.Input<string>;
        /**
         * A `deleteRetentionPolicy` block as defined below.
         */
        deleteRetentionPolicy?: pulumi.Input<inputs.storage.AccountBlobPropertiesDeleteRetentionPolicy>;
        /**
         * Is the last access time based tracking enabled? Default to `false`.
         *
         * > **Note:** This field cannot be configured when `kind` is set to `Storage` (V1).
         */
        lastAccessTimeEnabled?: pulumi.Input<boolean>;
        /**
         * A `restorePolicy` block as defined below. This must be used together with `deleteRetentionPolicy` set, `versioningEnabled` and `changeFeedEnabled` set to `true`.
         *
         * > **Note:** This field cannot be configured when `kind` is set to `Storage` (V1).
         *
         * > **Note:** `restorePolicy` can not be configured when `dnsEndpointType` is `AzureDnsZone`.
         */
        restorePolicy?: pulumi.Input<inputs.storage.AccountBlobPropertiesRestorePolicy>;
        /**
         * Is versioning enabled? Default to `false`.
         *
         * > **Note:** This field cannot be configured when `kind` is set to `Storage` (V1).
         */
        versioningEnabled?: pulumi.Input<boolean>;
    }
    interface AccountBlobPropertiesContainerDeleteRetentionPolicy {
        /**
         * Specifies the number of days that the container should be retained, between `1` and `365` days. Defaults to `7`.
         */
        days?: pulumi.Input<number>;
    }
    interface AccountBlobPropertiesCorsRule {
        /**
         * A list of headers that are allowed to be a part of the cross-origin request.
         */
        allowedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of HTTP methods that are allowed to be executed by the origin. Valid options are
         * `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PUT` or `PATCH`.
         */
        allowedMethods: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of origin domains that will be allowed by CORS.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of response headers that are exposed to CORS clients.
         */
        exposedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of seconds the client should cache a preflight response.
         */
        maxAgeInSeconds: pulumi.Input<number>;
    }
    interface AccountBlobPropertiesDeleteRetentionPolicy {
        /**
         * Specifies the number of days that the blob should be retained, between `1` and `365` days. Defaults to `7`.
         */
        days?: pulumi.Input<number>;
        /**
         * Indicates whether permanent deletion of the soft deleted blob versions and snapshots is allowed. Defaults to `false`.
         *
         * > **Note:** `permanentDeleteEnabled` cannot be set to true if a `restorePolicy` block is defined.
         */
        permanentDeleteEnabled?: pulumi.Input<boolean>;
    }
    interface AccountBlobPropertiesRestorePolicy {
        /**
         * Specifies the number of days that the blob can be restored, between `1` and `365` days. This must be less than the `days` specified for `deleteRetentionPolicy`.
         */
        days: pulumi.Input<number>;
    }
    interface AccountCustomDomain {
        /**
         * The Custom Domain Name to use for the Storage Account, which will be validated by Azure.
         */
        name: pulumi.Input<string>;
        /**
         * Should the Custom Domain Name be validated by using indirect CNAME validation?
         *
         * > **Note:** [More information on Validation is available here](https://docs.microsoft.com/en-gb/azure/storage/blobs/storage-custom-domain-name)
         */
        useSubdomain?: pulumi.Input<boolean>;
    }
    interface AccountCustomerManagedKey {
        /**
         * The ID of the Key Vault Key, supplying a version-less key ID will enable auto-rotation of this key.
         */
        keyVaultKeyId?: pulumi.Input<string>;
        /**
         * @deprecated `managedHsmKeyId` has been deprecated in favour of `keyVaultKeyId` and will be removed in v5.0 of the AzureRM provider
         */
        managedHsmKeyId?: pulumi.Input<string>;
        /**
         * The ID of a user assigned identity.
         *
         * > **Note:** `customerManagedKey` can only be set when the `accountKind` is set to `StorageV2` or `accountTier` set to `Premium`, and the identity type is `UserAssigned`.
         */
        userAssignedIdentityId: pulumi.Input<string>;
    }
    interface AccountIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Storage Account.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         *
         * > **Note:** The assigned `principalId` and `tenantId` can be retrieved after the identity `type` has been set to `SystemAssigned`  and Storage Account has been created. More details are available below.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Identity of this Storage Account.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Identity of this Storage Account.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Storage Account. Possible values are `SystemAssigned`, `UserAssigned`, `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface AccountImmutabilityPolicy {
        /**
         * When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
         */
        allowProtectedAppendWrites: pulumi.Input<boolean>;
        /**
         * The immutability period for the blobs in the container since the policy creation, in days.
         */
        periodSinceCreationInDays: pulumi.Input<number>;
        /**
         * Defines the mode of the policy. `Disabled` state disables the policy, `Unlocked` state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, `Locked` state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
         */
        state: pulumi.Input<string>;
    }
    interface AccountNetworkRules {
        /**
         * Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Valid options are any combination of `Logging`, `Metrics`, `AzureServices`, or `None`.
         */
        bypasses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the default action of allow or deny when no other rules match. Valid options are `Deny` or `Allow`.
         */
        defaultAction: pulumi.Input<string>;
        /**
         * List of public IP or IP ranges in CIDR Format. Only IPv4 addresses are allowed. /31 CIDRs, /32 CIDRs, and Private IP address ranges (as defined in [RFC 1918](https://tools.ietf.org/html/rfc1918#section-3)), are not allowed.
         */
        ipRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `privateLinkAccess` block as defined below.
         *
         * > **Note:** If specifying `networkRules`, one of either `ipRules` or `virtualNetworkSubnetIds` must be specified and `defaultAction` must be set to `Deny`.
         *
         * > **Note:** Network Rules can be defined either directly on the `azure.storage.Account` resource, or using the `azure.storage.AccountNetworkRules` resource - but the two cannot be used together. If both are used against the same Storage Account, spurious changes will occur. When managing Network Rules using this resource, to change from a `defaultAction` of `Deny` to `Allow` requires defining, rather than removing, the block.
         *
         * > **Note:** The prefix of `ipRules` must be between 0 and 30 and only supports public IP addresses.
         */
        privateLinkAccesses?: pulumi.Input<pulumi.Input<inputs.storage.AccountNetworkRulesPrivateLinkAccess>[]>;
        /**
         * A list of resource ids for subnets.
         */
        virtualNetworkSubnetIds?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AccountNetworkRulesPrivateLinkAccess {
        /**
         * The ID of the Azure resource that should be allowed access to the target storage account.
         */
        endpointResourceId: pulumi.Input<string>;
        /**
         * The tenant id of the resource of the resource access rule to be granted access. Defaults to the current tenant id.
         */
        endpointTenantId?: pulumi.Input<string>;
    }
    interface AccountNetworkRulesPrivateLinkAccessRule {
        /**
         * The resource id of the resource access rule to be granted access.
         */
        endpointResourceId: pulumi.Input<string>;
        /**
         * The tenant id of the resource of the resource access rule to be granted access. Defaults to the current tenant id.
         */
        endpointTenantId?: pulumi.Input<string>;
    }
    interface AccountQueueProperties {
        /**
         * A `corsRule` block as defined above.
         */
        corsRules?: pulumi.Input<pulumi.Input<inputs.storage.AccountQueuePropertiesCorsRule>[]>;
        /**
         * A `hourMetrics` block as defined below.
         */
        hourMetrics?: pulumi.Input<inputs.storage.AccountQueuePropertiesHourMetrics>;
        /**
         * A `logging` block as defined below.
         */
        logging?: pulumi.Input<inputs.storage.AccountQueuePropertiesLogging>;
        /**
         * A `minuteMetrics` block as defined below.
         */
        minuteMetrics?: pulumi.Input<inputs.storage.AccountQueuePropertiesMinuteMetrics>;
    }
    interface AccountQueuePropertiesCorsRule {
        /**
         * A list of headers that are allowed to be a part of the cross-origin request.
         */
        allowedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of HTTP methods that are allowed to be executed by the origin. Valid options are `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PUT` or `PATCH`.
         */
        allowedMethods: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of origin domains that will be allowed by CORS.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of response headers that are exposed to CORS clients.
         */
        exposedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of seconds the client should cache a preflight response.
         */
        maxAgeInSeconds: pulumi.Input<number>;
    }
    interface AccountQueuePropertiesHourMetrics {
        /**
         * Indicates whether metrics should generate summary statistics for called API operations.
         */
        includeApis?: pulumi.Input<boolean>;
        /**
         * Specifies the number of days that logs will be retained.
         */
        retentionPolicyDays?: pulumi.Input<number>;
        /**
         * The version of storage analytics to configure.
         */
        version: pulumi.Input<string>;
    }
    interface AccountQueuePropertiesLogging {
        /**
         * Indicates whether all delete requests should be logged.
         */
        delete: pulumi.Input<boolean>;
        /**
         * Indicates whether all read requests should be logged.
         */
        read: pulumi.Input<boolean>;
        /**
         * Specifies the number of days that logs will be retained.
         */
        retentionPolicyDays?: pulumi.Input<number>;
        /**
         * The version of storage analytics to configure.
         */
        version: pulumi.Input<string>;
        /**
         * Indicates whether all write requests should be logged.
         */
        write: pulumi.Input<boolean>;
    }
    interface AccountQueuePropertiesMinuteMetrics {
        /**
         * Indicates whether metrics should generate summary statistics for called API operations.
         */
        includeApis?: pulumi.Input<boolean>;
        /**
         * Specifies the number of days that logs will be retained.
         */
        retentionPolicyDays?: pulumi.Input<number>;
        /**
         * The version of storage analytics to configure.
         */
        version: pulumi.Input<string>;
    }
    interface AccountRouting {
        /**
         * Specifies the kind of network routing opted by the user. Possible values are `InternetRouting` and `MicrosoftRouting`. Defaults to `MicrosoftRouting`.
         */
        choice?: pulumi.Input<string>;
        /**
         * Should internet routing storage endpoints be published? Defaults to `false`.
         */
        publishInternetEndpoints?: pulumi.Input<boolean>;
        /**
         * Should Microsoft routing storage endpoints be published? Defaults to `false`.
         */
        publishMicrosoftEndpoints?: pulumi.Input<boolean>;
    }
    interface AccountSasPolicy {
        /**
         * The SAS expiration action. Possible values are `Log` and `Block`. Defaults to `Log`.
         */
        expirationAction?: pulumi.Input<string>;
        /**
         * The SAS expiration period in format of `DD.HH:MM:SS`.
         */
        expirationPeriod: pulumi.Input<string>;
    }
    interface AccountShareProperties {
        /**
         * A `corsRule` block as defined below.
         */
        corsRules?: pulumi.Input<pulumi.Input<inputs.storage.AccountSharePropertiesCorsRule>[]>;
        /**
         * A `retentionPolicy` block as defined below.
         */
        retentionPolicy?: pulumi.Input<inputs.storage.AccountSharePropertiesRetentionPolicy>;
        /**
         * A `smb` block as defined below.
         */
        smb?: pulumi.Input<inputs.storage.AccountSharePropertiesSmb>;
    }
    interface AccountSharePropertiesCorsRule {
        /**
         * A list of headers that are allowed to be a part of the cross-origin request.
         */
        allowedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of HTTP methods that are allowed to be executed by the origin. Valid options are
         * `DELETE`, `GET`, `HEAD`, `MERGE`, `POST`, `OPTIONS`, `PUT` or `PATCH`.
         */
        allowedMethods: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of origin domains that will be allowed by CORS.
         */
        allowedOrigins: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of response headers that are exposed to CORS clients.
         */
        exposedHeaders: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The number of seconds the client should cache a preflight response.
         */
        maxAgeInSeconds: pulumi.Input<number>;
    }
    interface AccountSharePropertiesRetentionPolicy {
        /**
         * Specifies the number of days that the `azure.storage.Share` should be retained, between `1` and `365` days. Defaults to `7`.
         */
        days?: pulumi.Input<number>;
    }
    interface AccountSharePropertiesSmb {
        /**
         * A set of SMB authentication methods. Possible values are `NTLMv2`, and `Kerberos`.
         */
        authenticationTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A set of SMB channel encryption. Possible values are `AES-128-CCM`, `AES-128-GCM`, and `AES-256-GCM`.
         */
        channelEncryptionTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A set of Kerberos ticket encryption. Possible values are `RC4-HMAC`, and `AES-256`.
         */
        kerberosTicketEncryptionTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Indicates whether multichannel is enabled. Defaults to `false`. This is only supported on Premium storage accounts.
         */
        multichannelEnabled?: pulumi.Input<boolean>;
        /**
         * A set of SMB protocol versions. Possible values are `SMB2.1`, `SMB3.0`, and `SMB3.1.1`.
         */
        versions?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface AccountStaticWebsite {
        /**
         * The absolute path to a custom webpage that should be used when a request is made which does not correspond to an existing file.
         */
        error404Document?: pulumi.Input<string>;
        /**
         * The webpage that Azure Storage serves for requests to the root of a website or any subfolder. For example, index.html. The value is case-sensitive.
         */
        indexDocument?: pulumi.Input<string>;
    }
    interface BlobInventoryPolicyRule {
        /**
         * A `filter` block as defined above.
         */
        filter?: pulumi.Input<inputs.storage.BlobInventoryPolicyRuleFilter>;
        /**
         * The format of the inventory files. Possible values are `Csv` and `Parquet`.
         */
        format: pulumi.Input<string>;
        /**
         * The name which should be used for this Blob Inventory Policy Rule.
         */
        name: pulumi.Input<string>;
        /**
         * The inventory schedule applied by this rule. Possible values are `Daily` and `Weekly`.
         */
        schedule: pulumi.Input<string>;
        /**
         * A list of fields to be included in the inventory. See the [Azure API reference](https://docs.microsoft.com/rest/api/storagerp/blob-inventory-policies/create-or-update#blobinventorypolicydefinition) for all the supported fields.
         */
        schemaFields: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The scope of the inventory for this rule. Possible values are `Blob` and `Container`.
         */
        scope: pulumi.Input<string>;
        /**
         * The storage container name to store the blob inventory files for this rule.
         */
        storageContainerName: pulumi.Input<string>;
    }
    interface BlobInventoryPolicyRuleFilter {
        /**
         * A set of blob types. Possible values are `blockBlob`, `appendBlob`, and `pageBlob`. The storage account with `isHnsEnabled` is `true` doesn't support `pageBlob`.
         *
         * > **Note:** The `rules.*.schema_fields` for this rule has to include `BlobType` so that you can specify the `blobTypes`.
         */
        blobTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A set of strings for blob prefixes to be excluded. Maximum of 10 blob prefixes.
         */
        excludePrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Includes blob versions in blob inventory or not? Defaults to `false`.
         *
         * > **Note:** The `rules.*.schema_fields` for this rule has to include `IsCurrentVersion` and `VersionId` so that you can specify the `includeBlobVersions`.
         */
        includeBlobVersions?: pulumi.Input<boolean>;
        /**
         * Includes deleted blobs in blob inventory or not? Defaults to `false`.
         *
         * > **Note:** If `rules.*.scope` is `Container`, the `rules.*.schema_fields` for this rule must include `Deleted`, `Version`, `DeletedTime`, and `RemainingRetentionDays` so that you can specify the `includeDeleted`. If `rules.*.scope` is `Blob`, the `rules.*.schema_fields` must include `Deleted` and `RemainingRetentionDays` so that you can specify the `includeDeleted`. If `rules.*.scope` is `Blob` and the storage account specified by `storageAccountId` has hierarchical namespaces enabled (`isHnsEnabled` is `true` on the storage account), the `rules.*.schema_fields` for this rule must include `Deleted`, `Version`, `DeletedTime`, and `RemainingRetentionDays` so that you can specify the `includeDeleted`.
         */
        includeDeleted?: pulumi.Input<boolean>;
        /**
         * Includes blob snapshots in blob inventory or not? Defaults to `false`.
         *
         * > **Note:** The `rules.*.schema_fields` for this rule has to include `Snapshot` so that you can specify the `includeSnapshots`.
         */
        includeSnapshots?: pulumi.Input<boolean>;
        /**
         * A set of strings for blob prefixes to be matched. Maximum of 10 blob prefixes.
         */
        prefixMatches?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface DataLakeGen2FilesystemAce {
        /**
         * Specifies the Object ID of the Azure Active Directory User or Group that the entry relates to. Only valid for `user` or `group` entries.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the permissions for the entry in `rwx` form. For example, `rwx` gives full permissions but `r--` only gives read permissions.
         *
         * More details on ACLs can be found here: <https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#access-control-lists-on-files-and-directories>
         */
        permissions: pulumi.Input<string>;
        /**
         * Specifies whether the ACE represents an `access` entry or a `default` entry. Default value is `access`.
         */
        scope?: pulumi.Input<string>;
        /**
         * Specifies the type of entry. Can be `user`, `group`, `mask` or `other`.
         */
        type: pulumi.Input<string>;
    }
    interface DataLakeGen2PathAce {
        /**
         * Specifies the Object ID of the Azure Active Directory User or Group that the entry relates to. Only valid for `user` or `group` entries.
         */
        id?: pulumi.Input<string>;
        /**
         * Specifies the permissions for the entry in `rwx` form. For example, `rwx` gives full permissions but `r--` only gives read permissions.
         *
         * More details on ACLs can be found here: <https://docs.microsoft.com/azure/storage/blobs/data-lake-storage-access-control#access-control-lists-on-files-and-directories>
         *
         * > **Note:** Using the service's ACE inheritance features will not work well with terraform since we cannot handle changes that are taking place out-of-band. Setting the path to inherit its permissions from its parent will result in terraform trying to revert them in the next apply operation.
         *
         * > **Note:** The Storage Account requires `accountKind` to be either `StorageV2` or `BlobStorage`. In addition, `isHnsEnabled` has to be set to `true`.
         */
        permissions: pulumi.Input<string>;
        /**
         * Specifies whether the ACE represents an `access` entry or a `default` entry. Default value is `access`.
         */
        scope?: pulumi.Input<string>;
        /**
         * Specifies the type of entry. Can be `user`, `group`, `mask` or `other`.
         */
        type: pulumi.Input<string>;
    }
    interface GetAccountBlobContainerSASPermissions {
        /**
         * Should Add permissions be enabled for this SAS?
         */
        add?: boolean;
        /**
         * Should Create permissions be enabled for this SAS?
         */
        create?: boolean;
        /**
         * Should Delete permissions be enabled for this SAS?
         */
        delete?: boolean;
        /**
         * Should Delete version permissions be enabled for this SAS?
         */
        deleteVersion?: boolean;
        /**
         * Should Execute permissions be enabled for this SAS?
         */
        execute?: boolean;
        /**
         * Should Find permissions be enabled for this SAS?
         */
        find?: boolean;
        /**
         * Should List permissions be enabled for this SAS?
         */
        list?: boolean;
        /**
         * Should Move permissions be enabled for this SAS?
         */
        move?: boolean;
        /**
         * Should Ownership permissions be enabled for this SAS?
         */
        ownership?: boolean;
        /**
         * Should Permissions permissions be enabled for this SAS?
         */
        permissions?: boolean;
        /**
         * Should Read permissions be enabled for this SAS?
         */
        read?: boolean;
        /**
         * Should Set Immutability Policy permissions be enabled for this SAS?
         */
        setImmutabilityPolicy?: boolean;
        /**
         * Should Tags permissions be enabled for this SAS?
         */
        tags?: boolean;
        /**
         * Should Write permissions be enabled for this SAS?
         *
         * > **Note:** Refer to the [SAS creation reference from Azure](https://docs.microsoft.com/rest/api/storageservices/create-service-sas) for additional details on the fields above.
         */
        write?: boolean;
    }
    interface GetAccountBlobContainerSASPermissionsArgs {
        /**
         * Should Add permissions be enabled for this SAS?
         */
        add?: pulumi.Input<boolean>;
        /**
         * Should Create permissions be enabled for this SAS?
         */
        create?: pulumi.Input<boolean>;
        /**
         * Should Delete permissions be enabled for this SAS?
         */
        delete?: pulumi.Input<boolean>;
        /**
         * Should Delete version permissions be enabled for this SAS?
         */
        deleteVersion?: pulumi.Input<boolean>;
        /**
         * Should Execute permissions be enabled for this SAS?
         */
        execute?: pulumi.Input<boolean>;
        /**
         * Should Find permissions be enabled for this SAS?
         */
        find?: pulumi.Input<boolean>;
        /**
         * Should List permissions be enabled for this SAS?
         */
        list?: pulumi.Input<boolean>;
        /**
         * Should Move permissions be enabled for this SAS?
         */
        move?: pulumi.Input<boolean>;
        /**
         * Should Ownership permissions be enabled for this SAS?
         */
        ownership?: pulumi.Input<boolean>;
        /**
         * Should Permissions permissions be enabled for this SAS?
         */
        permissions?: pulumi.Input<boolean>;
        /**
         * Should Read permissions be enabled for this SAS?
         */
        read?: pulumi.Input<boolean>;
        /**
         * Should Set Immutability Policy permissions be enabled for this SAS?
         */
        setImmutabilityPolicy?: pulumi.Input<boolean>;
        /**
         * Should Tags permissions be enabled for this SAS?
         */
        tags?: pulumi.Input<boolean>;
        /**
         * Should Write permissions be enabled for this SAS?
         *
         * > **Note:** Refer to the [SAS creation reference from Azure](https://docs.microsoft.com/rest/api/storageservices/create-service-sas) for additional details on the fields above.
         */
        write?: pulumi.Input<boolean>;
    }
    interface GetAccountSASPermissions {
        /**
         * Should Add permissions be enabled for this SAS?
         */
        add?: boolean;
        /**
         * Should Create permissions be enabled for this SAS?
         */
        create?: boolean;
        /**
         * Should Delete permissions be enabled for this SAS?
         */
        delete?: boolean;
        /**
         * Should Filter by Index Tags permissions be enabled for this SAS?
         */
        filter?: boolean;
        /**
         * Should List permissions be enabled for this SAS?
         */
        list?: boolean;
        /**
         * Should Process permissions be enabled for this SAS?
         */
        process?: boolean;
        /**
         * Should Read permissions be enabled for this SAS?
         */
        read?: boolean;
        /**
         * Should Get / Set Index Tags permissions be enabled for this SAS?
         */
        tag?: boolean;
        /**
         * Should Update permissions be enabled for this SAS?
         */
        update?: boolean;
        /**
         * Should Write permissions be enabled for this SAS?
         *
         * > **Note:** Refer to the [SAS creation reference from Azure](https://docs.microsoft.com/rest/api/storageservices/constructing-an-account-sas) for additional details on the fields above.
         */
        write?: boolean;
    }
    interface GetAccountSASPermissionsArgs {
        /**
         * Should Add permissions be enabled for this SAS?
         */
        add?: pulumi.Input<boolean>;
        /**
         * Should Create permissions be enabled for this SAS?
         */
        create?: pulumi.Input<boolean>;
        /**
         * Should Delete permissions be enabled for this SAS?
         */
        delete?: pulumi.Input<boolean>;
        /**
         * Should Filter by Index Tags permissions be enabled for this SAS?
         */
        filter?: pulumi.Input<boolean>;
        /**
         * Should List permissions be enabled for this SAS?
         */
        list?: pulumi.Input<boolean>;
        /**
         * Should Process permissions be enabled for this SAS?
         */
        process?: pulumi.Input<boolean>;
        /**
         * Should Read permissions be enabled for this SAS?
         */
        read?: pulumi.Input<boolean>;
        /**
         * Should Get / Set Index Tags permissions be enabled for this SAS?
         */
        tag?: pulumi.Input<boolean>;
        /**
         * Should Update permissions be enabled for this SAS?
         */
        update?: pulumi.Input<boolean>;
        /**
         * Should Write permissions be enabled for this SAS?
         *
         * > **Note:** Refer to the [SAS creation reference from Azure](https://docs.microsoft.com/rest/api/storageservices/constructing-an-account-sas) for additional details on the fields above.
         */
        write?: pulumi.Input<boolean>;
    }
    interface GetAccountSASResourceTypes {
        /**
         * Should permission be granted to the container?
         */
        container: boolean;
        /**
         * Should permission be granted only to a specific object?
         */
        object: boolean;
        /**
         * Should permission be granted to the entire service?
         */
        service: boolean;
    }
    interface GetAccountSASResourceTypesArgs {
        /**
         * Should permission be granted to the container?
         */
        container: pulumi.Input<boolean>;
        /**
         * Should permission be granted only to a specific object?
         */
        object: pulumi.Input<boolean>;
        /**
         * Should permission be granted to the entire service?
         */
        service: pulumi.Input<boolean>;
    }
    interface GetAccountSASServices {
        /**
         * Should permission be granted to `blob` services within this storage account?
         */
        blob: boolean;
        /**
         * Should permission be granted to `file` services within this storage account?
         */
        file: boolean;
        /**
         * Should permission be granted to `queue` services within this storage account?
         */
        queue: boolean;
        /**
         * Should permission be granted to `table` services within this storage account?
         */
        table: boolean;
    }
    interface GetAccountSASServicesArgs {
        /**
         * Should permission be granted to `blob` services within this storage account?
         */
        blob: pulumi.Input<boolean>;
        /**
         * Should permission be granted to `file` services within this storage account?
         */
        file: pulumi.Input<boolean>;
        /**
         * Should permission be granted to `queue` services within this storage account?
         */
        queue: pulumi.Input<boolean>;
        /**
         * Should permission be granted to `table` services within this storage account?
         */
        table: pulumi.Input<boolean>;
    }
    interface GetShareAcl {
        /**
         * An `accessPolicy` block as defined below.
         */
        accessPolicies?: inputs.storage.GetShareAclAccessPolicy[];
        /**
         * The ID which should be used for this Shared Identifier.
         */
        id?: string;
    }
    interface GetShareAclArgs {
        /**
         * An `accessPolicy` block as defined below.
         */
        accessPolicies?: pulumi.Input<pulumi.Input<inputs.storage.GetShareAclAccessPolicyArgs>[]>;
        /**
         * The ID which should be used for this Shared Identifier.
         */
        id?: pulumi.Input<string>;
    }
    interface GetShareAclAccessPolicy {
        /**
         * The time at which this Access Policy is valid until.
         */
        expiry?: string;
        /**
         * The permissions which should be associated with this Shared Identifier. Possible value is combination of `r` (read), `w` (write), `d` (delete), and `l` (list).
         */
        permissions?: string;
        /**
         * The time at which this Access Policy is valid from.
         */
        start?: string;
    }
    interface GetShareAclAccessPolicyArgs {
        /**
         * The time at which this Access Policy is valid until.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The permissions which should be associated with this Shared Identifier. Possible value is combination of `r` (read), `w` (write), `d` (delete), and `l` (list).
         */
        permissions?: pulumi.Input<string>;
        /**
         * The time at which this Access Policy is valid from.
         */
        start?: pulumi.Input<string>;
    }
    interface LocalUserPermissionScope {
        /**
         * A `permissions` block as defined below.
         */
        permissions: pulumi.Input<inputs.storage.LocalUserPermissionScopePermissions>;
        /**
         * The container name (when `service` is set to `blob`) or the file share name (when `service` is set to `file`), used by the Storage Account Local User.
         */
        resourceName: pulumi.Input<string>;
        /**
         * The storage service used by this Storage Account Local User. Possible values are `blob` and `file`.
         */
        service: pulumi.Input<string>;
    }
    interface LocalUserPermissionScopePermissions {
        /**
         * Specifies if the Local User has the create permission for this scope. Defaults to `false`.
         */
        create?: pulumi.Input<boolean>;
        /**
         * Specifies if the Local User has the delete permission for this scope. Defaults to `false`.
         */
        delete?: pulumi.Input<boolean>;
        /**
         * Specifies if the Local User has the list permission for this scope. Defaults to `false`.
         */
        list?: pulumi.Input<boolean>;
        /**
         * Specifies if the Local User has the read permission for this scope. Defaults to `false`.
         */
        read?: pulumi.Input<boolean>;
        /**
         * Specifies if the Local User has the write permission for this scope. Defaults to `false`.
         */
        write?: pulumi.Input<boolean>;
    }
    interface LocalUserSshAuthorizedKey {
        /**
         * The description of this SSH authorized key.
         */
        description?: pulumi.Input<string>;
        /**
         * The public key value of this SSH authorized key.
         */
        key: pulumi.Input<string>;
    }
    interface ManagementPolicyRule {
        /**
         * An `actions` block as documented below.
         */
        actions: pulumi.Input<inputs.storage.ManagementPolicyRuleActions>;
        /**
         * Boolean to specify whether the rule is enabled.
         */
        enabled: pulumi.Input<boolean>;
        /**
         * A `filters` block as documented below.
         */
        filters: pulumi.Input<inputs.storage.ManagementPolicyRuleFilters>;
        /**
         * The name of the rule. Rule name is case-sensitive. It must be unique within a policy.
         */
        name: pulumi.Input<string>;
    }
    interface ManagementPolicyRuleActions {
        /**
         * A `baseBlob` block as documented below.
         */
        baseBlob?: pulumi.Input<inputs.storage.ManagementPolicyRuleActionsBaseBlob>;
        /**
         * A `snapshot` block as documented below.
         */
        snapshot?: pulumi.Input<inputs.storage.ManagementPolicyRuleActionsSnapshot>;
        /**
         * A `version` block as documented below.
         */
        version?: pulumi.Input<inputs.storage.ManagementPolicyRuleActionsVersion>;
    }
    interface ManagementPolicyRuleActionsBaseBlob {
        /**
         * Whether a blob should automatically be tiered from cool back to hot if it's accessed again after being tiered to cool. Defaults to `false`.
         *
         * > **Note:** The `autoTierToHotFromCoolEnabled` must be used together with `tierToCoolAfterDaysSinceLastAccessTimeGreaterThan`.
         */
        autoTierToHotFromCoolEnabled?: pulumi.Input<boolean>;
        /**
         * The age in days after creation to delete the blob. Must be between `0` and `99999`. Defaults to `-1`.
         *
         * > **Note:** The `deleteAfterDaysSinceModificationGreaterThan`, `deleteAfterDaysSinceLastAccessTimeGreaterThan` and `deleteAfterDaysSinceCreationGreaterThan` can not be set at the same time.
         *
         * > **Note:** The `lastAccessTimeEnabled` must be set to `true` in the `azure.storage.Account` in order to use `tierToCoolAfterDaysSinceLastAccessTimeGreaterThan`, `tierToArchiveAfterDaysSinceLastAccessTimeGreaterThan` and `deleteAfterDaysSinceLastAccessTimeGreaterThan`.
         */
        deleteAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last access time to delete the blob. Must be between `0` and `99999`. Defaults to `-1`.
         */
        deleteAfterDaysSinceLastAccessTimeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last modification to delete the blob. Must be between `0` and `99999`. Defaults to `-1`.
         */
        deleteAfterDaysSinceModificationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after creation to archive storage. Supports blob currently at Hot or Cool tier. Must be between `0` and `99999`. Defaults to `-1`.
         *
         * > **Note:** The `tierToArchiveAfterDaysSinceModificationGreaterThan`, `tierToArchiveAfterDaysSinceLastAccessTimeGreaterThan` and `tierToArchiveAfterDaysSinceCreationGreaterThan` can not be set at the same time.
         */
        tierToArchiveAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last access time to tier blobs to archive storage. Supports blob currently at Hot or Cool tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToArchiveAfterDaysSinceLastAccessTimeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last modification to tier blobs to archive storage. Supports blob currently at Hot or Cool tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToArchiveAfterDaysSinceModificationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after creation to cold storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         *
         * > **Note:** The `tierToCoolAfterDaysSinceModificationGreaterThan`, `tierToCoolAfterDaysSinceLastAccessTimeGreaterThan` and `tierToCoolAfterDaysSinceCreationGreaterThan` can not be set at the same time.
         */
        tierToColdAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last access time to tier blobs to cold storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToColdAfterDaysSinceLastAccessTimeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last modification to tier blobs to cold storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToColdAfterDaysSinceModificationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after creation to cool storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         *
         * > **Note:** The `tierToCoolAfterDaysSinceModificationGreaterThan`, `tierToCoolAfterDaysSinceLastAccessTimeGreaterThan` and `tierToCoolAfterDaysSinceCreationGreaterThan` can not be set at the same time.
         */
        tierToCoolAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last access time to tier blobs to cool storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToCoolAfterDaysSinceLastAccessTimeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last modification to tier blobs to cool storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToCoolAfterDaysSinceModificationGreaterThan?: pulumi.Input<number>;
    }
    interface ManagementPolicyRuleActionsSnapshot {
        /**
         * The age in days after creation to tier blob snapshot to archive storage. Must be between `0` and `99999`. Defaults to `-1`.
         */
        changeTierToArchiveAfterDaysSinceCreation?: pulumi.Input<number>;
        /**
         * The age in days after creation to tier blob snapshot to cool storage. Must be between `0` and `99999`. Defaults to `-1`.
         */
        changeTierToCoolAfterDaysSinceCreation?: pulumi.Input<number>;
        /**
         * The age in days after creation to delete the blob snapshot. Must be between `0` and `99999`. Defaults to `-1`.
         */
        deleteAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after creation to cold storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToColdAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
    }
    interface ManagementPolicyRuleActionsVersion {
        /**
         * The age in days after creation to tier blob version to archive storage. Must be between `0` and `99999`. Defaults to `-1`.
         */
        changeTierToArchiveAfterDaysSinceCreation?: pulumi.Input<number>;
        /**
         * The age in days creation create to tier blob version to cool storage. Must be between `0` and `99999`. Defaults to `-1`.
         */
        changeTierToCoolAfterDaysSinceCreation?: pulumi.Input<number>;
        /**
         * The age in days after creation to delete the blob version. Must be between `0` and `99999`. Defaults to `-1`.
         */
        deleteAfterDaysSinceCreation?: pulumi.Input<number>;
        /**
         * The age in days after last tier change to the blobs to skip to be archived. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToArchiveAfterDaysSinceLastTierChangeGreaterThan?: pulumi.Input<number>;
        /**
         * The age in days after creation to cold storage. Supports blob currently at Hot tier. Must be between `0` and `99999`. Defaults to `-1`.
         */
        tierToColdAfterDaysSinceCreationGreaterThan?: pulumi.Input<number>;
    }
    interface ManagementPolicyRuleFilters {
        /**
         * An array of predefined values. Valid options are `blockBlob` and `appendBlob`.
         */
        blobTypes: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A `matchBlobIndexTag` block as defined below. The block defines the blob index tag based filtering for blob objects.
         *
         * > **Note:** The `matchBlobIndexTag` property requires enabling the `blobIndex` feature with [PSH or CLI commands](https://azure.microsoft.com/en-us/blog/manage-and-find-data-with-blob-index-for-azure-storage-now-in-preview/).
         */
        matchBlobIndexTags?: pulumi.Input<pulumi.Input<inputs.storage.ManagementPolicyRuleFiltersMatchBlobIndexTag>[]>;
        /**
         * An array of strings for prefixes to be matched.
         */
        prefixMatches?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ManagementPolicyRuleFiltersMatchBlobIndexTag {
        /**
         * The filter tag name used for tag based filtering for blob objects.
         */
        name: pulumi.Input<string>;
        /**
         * The comparison operator which is used for object comparison and filtering. Possible value is `==`. Defaults to `==`.
         */
        operation?: pulumi.Input<string>;
        /**
         * The filter tag value used for tag based filtering for blob objects.
         */
        value: pulumi.Input<string>;
    }
    interface ObjectReplicationRule {
        /**
         * The time after which the Block Blobs created will be copies to the destination. Possible values are `OnlyNewObjects`, `Everything` and time in RFC3339 format: `2006-01-02T15:04:00Z`. Defaults to `OnlyNewObjects`.
         */
        copyBlobsCreatedAfter?: pulumi.Input<string>;
        /**
         * The destination storage container name.
         */
        destinationContainerName: pulumi.Input<string>;
        /**
         * Specifies a list of filters prefixes, the blobs whose names begin with which will be replicated.
         */
        filterOutBlobsWithPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        name?: pulumi.Input<string>;
        /**
         * The source storage container name.
         */
        sourceContainerName: pulumi.Input<string>;
    }
    interface ShareAcl {
        /**
         * An `accessPolicy` block as defined below.
         */
        accessPolicies?: pulumi.Input<pulumi.Input<inputs.storage.ShareAclAccessPolicy>[]>;
        /**
         * The ID which should be used for this Shared Identifier.
         */
        id: pulumi.Input<string>;
    }
    interface ShareAclAccessPolicy {
        /**
         * The time at which this Access Policy should be valid untilWhen using `storageAccountId` this should be in RFC3339 format. If using the deprecated `storageAccountName` property, this uses the [ISO8601](https://en.wikipedia.org/wiki/ISO_8601) format.
         */
        expiry?: pulumi.Input<string>;
        /**
         * The permissions which should be associated with this Shared Identifier. Possible value is combination of `r` (read), `w` (write), `d` (delete), and `l` (list).
         *
         * > **Note:** Permission order is strict at the service side, and permissions need to be listed in the order above.
         */
        permissions: pulumi.Input<string>;
        /**
         * The time at which this Access Policy should be valid from. When using `storageAccountId` this should be in RFC3339 format. If using the deprecated `storageAccountName` property, this uses the [ISO8601](https://en.wikipedia.org/wiki/ISO_8601) format.
         */
        start?: pulumi.Input<string>;
    }
    interface TableAcl {
        /**
         * An `accessPolicy` block as defined below.
         */
        accessPolicies?: pulumi.Input<pulumi.Input<inputs.storage.TableAclAccessPolicy>[]>;
        /**
         * The ID which should be used for this Shared Identifier.
         */
        id: pulumi.Input<string>;
    }
    interface TableAclAccessPolicy {
        /**
         * The ISO8061 UTC time at which this Access Policy should be valid until.
         */
        expiry: pulumi.Input<string>;
        /**
         * The permissions which should associated with this Shared Identifier.
         */
        permissions: pulumi.Input<string>;
        /**
         * The ISO8061 UTC time at which this Access Policy should be valid from.
         */
        start: pulumi.Input<string>;
    }
}
export declare namespace streamanalytics {
    interface FunctionJavaScriptUDFInput {
        /**
         * Is this input parameter a configuration parameter? Defaults to `false`.
         */
        configurationParameter?: pulumi.Input<boolean>;
        /**
         * The Data Type for the Input Argument of this JavaScript Function. Possible values include `array`, `any`, `bigint`, `datetime`, `float`, `nvarchar(max)` and `record`.
         */
        type: pulumi.Input<string>;
    }
    interface FunctionJavaScriptUDFOutput {
        /**
         * The Data Type output from this JavaScript Function. Possible values include `array`, `any`, `bigint`, `datetime`, `float`, `nvarchar(max)` and `record`.
         */
        type: pulumi.Input<string>;
    }
    interface FunctionJavascriptUdaInput {
        /**
         * Is this input parameter a configuration parameter? Defaults to `false`.
         */
        configurationParameter?: pulumi.Input<boolean>;
        /**
         * The input data type of this JavaScript Function. Possible values include `any`, `array`, `bigint`, `datetime`, `float`, `nvarchar(max)` and `record`.
         */
        type: pulumi.Input<string>;
    }
    interface FunctionJavascriptUdaOutput {
        /**
         * The output data type from this JavaScript Function. Possible values include `any`, `array`, `bigint`, `datetime`, `float`, `nvarchar(max)` and `record`.
         */
        type: pulumi.Input<string>;
    }
    interface JobIdentity {
        /**
         * The identity id of the user assigned identity to use when type is `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Stream Analytics Job. Possible values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface JobJobStorageAccount {
        /**
         * The account key for the Azure storage account.
         */
        accountKey?: pulumi.Input<string>;
        /**
         * The name of the Azure storage account.
         */
        accountName: pulumi.Input<string>;
        /**
         * The authentication mode of the storage account. Possible values are `ConnectionString` and `Msi`. Defaults to `ConnectionString`.
         */
        authenticationMode?: pulumi.Input<string>;
    }
    interface OutputBlobSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * Specifies the format of the JSON the output will be written in. Possible values are `Array` and `LineSeparated`.
         *
         * > **Note:** This is Required and can only be specified when `type` is set to `Json`.
         */
        format?: pulumi.Input<string>;
        /**
         * The serialization format used for outgoing data streams. Possible values are `Avro`, `Csv`, `Json` and `Parquet`.
         *
         * > **Note:** `batchMaxWaitTime` and `batchMinRows` are required when `type` is set to `Parquet`
         */
        type: pulumi.Input<string>;
    }
    interface OutputEventHubSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * Specifies the format of the JSON the output will be written in. Possible values are `Array` and `LineSeparated`.
         *
         * > **Note:** This is Required and can only be specified when `type` is set to `Json`.
         */
        format?: pulumi.Input<string>;
        /**
         * The serialization format used for outgoing data streams. Possible values are `Avro`, `Csv`, `Json` and `Parquet`.
         */
        type: pulumi.Input<string>;
    }
    interface OutputServiceBusQueueSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * Specifies the format of the JSON the output will be written in. Possible values are `Array` and `LineSeparated`.
         *
         * > **Note:** This is Required and can only be specified when `type` is set to `Json`.
         */
        format?: pulumi.Input<string>;
        /**
         * The serialization format used for outgoing data streams. Possible values are `Avro`, `Csv`, `Json` and `Parquet`.
         */
        type: pulumi.Input<string>;
    }
    interface OutputServicebusTopicSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * Specifies the format of the JSON the output will be written in. Possible values are `Array` and `LineSeparated`.
         *
         * > **Note:** This is Required and can only be specified when `type` is set to `Json`.
         */
        format?: pulumi.Input<string>;
        /**
         * The serialization format used for outgoing data streams. Possible values are `Avro`, `Csv`, `Json` and `Parquet`.
         */
        type: pulumi.Input<string>;
    }
    interface ReferenceInputBlobSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * The serialization format used for the reference data. Possible values are `Avro`, `Csv` and `Json`.
         */
        type: pulumi.Input<string>;
    }
    interface StreamInputBlobSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * The serialization format used for incoming data streams. Possible values are `Avro`, `Csv` and `Json`.
         */
        type: pulumi.Input<string>;
    }
    interface StreamInputEventHubSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * The serialization format used for incoming data streams. Possible values are `Avro`, `Csv` and `Json`.
         */
        type: pulumi.Input<string>;
    }
    interface StreamInputEventHubV2Serialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * The serialization format used for incoming data streams. Possible values are `Avro`, `Csv` and `Json`.
         */
        type: pulumi.Input<string>;
    }
    interface StreamInputIotHubSerialization {
        /**
         * The encoding of the incoming data in the case of input and the encoding of outgoing data in the case of output. It currently can only be set to `UTF8`.
         *
         * > **Note:** This is required when `type` is set to `Csv` or `Json`.
         */
        encoding?: pulumi.Input<string>;
        /**
         * The delimiter that will be used to separate comma-separated value (CSV) records. Possible values are ` ` (space), `,` (comma), `	` (tab), `|` (pipe) and `;`.
         *
         * > **Note:** This is required when `type` is set to `Csv`.
         */
        fieldDelimiter?: pulumi.Input<string>;
        /**
         * The serialization format used for incoming data streams. Possible values are `Avro`, `Csv` and `Json`.
         */
        type: pulumi.Input<string>;
    }
}
export declare namespace synapse {
    interface LinkedServiceIntegrationRuntime {
        /**
         * The integration runtime reference to associate with the Synapse Linked Service.
         */
        name: pulumi.Input<string>;
        /**
         * A map of parameters to associate with the integration runtime.
         */
        parameters?: pulumi.Input<{
            [key: string]: pulumi.Input<string>;
        }>;
    }
    interface SparkPoolAutoPause {
        /**
         * Number of minutes of idle time before the Spark Pool is automatically paused. Must be between `5` and `10080`.
         */
        delayInMinutes: pulumi.Input<number>;
    }
    interface SparkPoolAutoScale {
        /**
         * The maximum number of nodes the Spark Pool can support. Must be between `3` and `200`.
         */
        maxNodeCount: pulumi.Input<number>;
        /**
         * The minimum number of nodes the Spark Pool can support. Must be between `3` and `200`.
         */
        minNodeCount: pulumi.Input<number>;
    }
    interface SparkPoolLibraryRequirement {
        /**
         * The content of library requirements.
         */
        content: pulumi.Input<string>;
        /**
         * The name of the library requirements file.
         */
        filename: pulumi.Input<string>;
    }
    interface SparkPoolSparkConfig {
        /**
         * The contents of a spark configuration.
         */
        content: pulumi.Input<string>;
        /**
         * The name of the file where the spark configuration `content` will be stored.
         */
        filename: pulumi.Input<string>;
    }
    interface SqlPoolRestore {
        /**
         * Specifies the Snapshot time to restore formatted as an RFC3339 date string. Changing this forces a new Synapse SQL Pool to be created.
         */
        pointInTime: pulumi.Input<string>;
        /**
         * The ID of the Synapse SQL Pool or SQL Database which is to restore. Changing this forces a new Synapse SQL Pool to be created.
         */
        sourceDatabaseId: pulumi.Input<string>;
    }
    interface SqlPoolVulnerabilityAssessmentBaselineBaseline {
        /**
         * Specifies a list of rule baseline result.
         */
        results: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface SqlPoolVulnerabilityAssessmentRecurringScans {
        /**
         * Boolean flag which specifies if the schedule scan notification will be sent to the subscription administrators. Defaults to `true`.
         */
        emailSubscriptionAdminsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies an array of email addresses to which the scan notification is sent.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Boolean flag which specifies if recurring scans is enabled or disabled. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
    }
    interface WorkspaceAzureDevopsRepo {
        /**
         * Specifies the Azure DevOps account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * Specifies the collaboration branch of the repository to get code from.
         */
        branchName: pulumi.Input<string>;
        /**
         * The last commit ID.
         */
        lastCommitId?: pulumi.Input<string>;
        /**
         * Specifies the name of the Azure DevOps project.
         */
        projectName: pulumi.Input<string>;
        /**
         * Specifies the name of the git repository.
         */
        repositoryName: pulumi.Input<string>;
        /**
         * Specifies the root folder within the repository. Set to `/` for the top level.
         */
        rootFolder: pulumi.Input<string>;
        /**
         * the ID of the tenant for the Azure DevOps account.
         */
        tenantId?: pulumi.Input<string>;
    }
    interface WorkspaceCustomerManagedKey {
        /**
         * An identifier for the key. Name needs to match the name of the key used with the `azure.synapse.WorkspaceKey` resource. Defaults to "cmk" if not specified.
         */
        keyName?: pulumi.Input<string>;
        /**
         * The Azure Key Vault Key Versionless ID to be used as the Customer Managed Key (CMK) for double encryption (e.g. `https://example-keyvault.vault.azure.net/type/cmk/`).
         */
        keyVersionlessId: pulumi.Input<string>;
        /**
         * The User Assigned Identity ID to be used for accessing the Customer Managed Key for encryption.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
    interface WorkspaceGithubRepo {
        /**
         * Specifies the GitHub account name.
         */
        accountName: pulumi.Input<string>;
        /**
         * Specifies the collaboration branch of the repository to get code from.
         */
        branchName: pulumi.Input<string>;
        /**
         * Specifies the GitHub Enterprise host name. For example: <https://github.mydomain.com>.
         *
         * > **Note:** You must log in to the Synapse UI to complete the authentication to the GitHub repository.
         */
        gitUrl?: pulumi.Input<string>;
        /**
         * The last commit ID.
         */
        lastCommitId?: pulumi.Input<string>;
        /**
         * Specifies the name of the git repository.
         */
        repositoryName: pulumi.Input<string>;
        /**
         * Specifies the root folder within the repository. Set to `/` for the top level.
         */
        rootFolder: pulumi.Input<string>;
    }
    interface WorkspaceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Synapse Workspace.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned` or `SystemAssigned, UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID for the Service Principal associated with the Managed Service Identity of this Synapse Workspace.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID for the Service Principal associated with the Managed Service Identity of this Synapse Workspace.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be associated with this Synapse Workspace. Possible values are `SystemAssigned`, `UserAssigned` and `SystemAssigned, UserAssigned` (to enable both).
         */
        type: pulumi.Input<string>;
    }
    interface WorkspaceVulnerabilityAssessmentRecurringScans {
        /**
         * Boolean flag which specifies if the schedule scan notification will be sent to the subscription administrators. Defaults to `true`.
         */
        emailSubscriptionAdminsEnabled?: pulumi.Input<boolean>;
        /**
         * Specifies an array of email addresses to which the scan notification is sent.
         */
        emails?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Boolean flag which specifies if recurring scans is enabled or disabled. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
    }
}
export declare namespace systemcenter {
    interface VirtualMachineManagerVirtualMachineInstanceHardware {
        /**
         * The number of vCPUs for the Virtual Machine. Possible values are between `1` and `64`.
         */
        cpuCount?: pulumi.Input<number>;
        /**
         * The max dynamic memory for the Virtual Machine. Possible values are between `32` and `1048576`.
         */
        dynamicMemoryMaxInMb?: pulumi.Input<number>;
        /**
         * The min dynamic memory for the Virtual Machine. Possible values are between `32` and `1048576`.
         */
        dynamicMemoryMinInMb?: pulumi.Input<number>;
        /**
         * Whether processor compatibility mode for live migration of Virtual Machines is enabled.
         */
        limitCpuForMigrationEnabled?: pulumi.Input<boolean>;
        /**
         * The size of a Virtual Machine's memory. Possible values are between `32` and `1048576`.
         */
        memoryInMb?: pulumi.Input<number>;
    }
    interface VirtualMachineManagerVirtualMachineInstanceInfrastructure {
        /**
         * The type of checkpoint supported for the Virtual Machine. Possible values are `Disabled`, `Production`, `ProductionOnly` and `Standard`.
         */
        checkpointType?: pulumi.Input<string>;
        /**
         * The ID of the System Center Virtual Machine Manager Cloud resource to use for deploying the Virtual Machine. Changing this forces a new resource to be created.
         */
        systemCenterVirtualMachineManagerCloudId?: pulumi.Input<string>;
        /**
         * The ID of the System Center Virtual Machine Manager Inventory Item for System Center Virtual Machine Manager Virtual Machine Instance. Changing this forces a new resource to be created.
         */
        systemCenterVirtualMachineManagerInventoryItemId?: pulumi.Input<string>;
        /**
         * The ID of the System Center Virtual Machine Manager Virtual Machine Template to use for deploying the Virtual Machine. Changing this forces a new resource to be created.
         */
        systemCenterVirtualMachineManagerTemplateId?: pulumi.Input<string>;
        /**
         * The ID of the System Center Virtual Machine Manager Virtual Machine. Changing this forces a new resource to be created.
         */
        systemCenterVirtualMachineManagerVirtualMachineServerId?: pulumi.Input<string>;
    }
    interface VirtualMachineManagerVirtualMachineInstanceNetworkInterface {
        /**
         * The IPv4 address type. Possible values are `Dynamic` and `Static`.
         */
        ipv4AddressType?: pulumi.Input<string>;
        /**
         * The IPv6 address type. Possible values are `Dynamic` and `Static`.
         */
        ipv6AddressType?: pulumi.Input<string>;
        /**
         * The MAC address type. Possible values are `Dynamic` and `Static`.
         */
        macAddressType?: pulumi.Input<string>;
        /**
         * The name of the Virtual Network in System Center Virtual Machine Manager Server that the Network Interface is connected to.
         */
        name: pulumi.Input<string>;
        /**
         * The ID of the System Center Virtual Machine Manager Virtual Network to connect the Network Interface.
         */
        virtualNetworkId?: pulumi.Input<string>;
    }
    interface VirtualMachineManagerVirtualMachineInstanceOperatingSystem {
        /**
         * The admin password of the Virtual Machine. Changing this forces a new resource to be created.
         */
        adminPassword?: pulumi.Input<string>;
        /**
         * The computer name of the Virtual Machine. Changing this forces a new resource to be created.
         */
        computerName?: pulumi.Input<string>;
    }
    interface VirtualMachineManagerVirtualMachineInstanceStorageDisk {
        /**
         * The disk bus. Possible values are between `0` and `3`.
         */
        bus?: pulumi.Input<number>;
        /**
         * The disk bus type. Possible values are `IDE` and `SCSI`.
         */
        busType?: pulumi.Input<string>;
        /**
         * The disk total size.
         */
        diskSizeGb?: pulumi.Input<number>;
        /**
         * The disk lun. Possible values are between `0` and `63`.
         */
        lun?: pulumi.Input<number>;
        /**
         * The name of the disk.
         */
        name?: pulumi.Input<string>;
        /**
         * The name of the Storage QoS policy.
         */
        storageQosPolicyName?: pulumi.Input<string>;
        /**
         * The disk ID in the System Center Virtual Machine Manager Virtual Machine Template. Changing this forces a new resource to be created.
         */
        templateDiskId?: pulumi.Input<string>;
        /**
         * The disk vhd type. Possible values are `Dynamic` and `Fixed`.
         */
        vhdType?: pulumi.Input<string>;
    }
}
export declare namespace trafficmanager {
    interface ProfileDnsConfig {
        /**
         * The relative domain name, this is combined with the domain name used by Traffic Manager to form the FQDN which is exported as documented below. Changing this forces a new resource to be created.
         */
        relativeName: pulumi.Input<string>;
        /**
         * The TTL value of the Profile used by Local DNS resolvers and clients.
         */
        ttl: pulumi.Input<number>;
    }
    interface ProfileMonitorConfig {
        /**
         * One or more `customHeader` blocks as defined below.
         */
        customHeaders?: pulumi.Input<pulumi.Input<inputs.trafficmanager.ProfileMonitorConfigCustomHeader>[]>;
        /**
         * A list of status code ranges in the format of `100-101`.
         */
        expectedStatusCodeRanges?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The interval used to check the endpoint health from a Traffic Manager probing agent. You can specify two values here: `30` (normal probing) and `10` (fast probing). The default value is `30`.
         */
        intervalInSeconds?: pulumi.Input<number>;
        /**
         * The path used by the monitoring checks. Required when `protocol` is set to `HTTP` or `HTTPS` - cannot be set when `protocol` is set to `TCP`.
         */
        path?: pulumi.Input<string>;
        /**
         * The port number used by the monitoring checks.
         */
        port: pulumi.Input<number>;
        /**
         * The protocol used by the monitoring checks, supported values are `HTTP`, `HTTPS` and `TCP`.
         */
        protocol: pulumi.Input<string>;
        /**
         * The amount of time the Traffic Manager probing agent should wait before considering that check a failure when a health check probe is sent to the endpoint. If `intervalInSeconds` is set to `30`, then `timeoutInSeconds` can be between `5` and `10`. The default value is `10`. If `intervalInSeconds` is set to `10`, then valid values are between `5` and `9` and `timeoutInSeconds` is required.
         */
        timeoutInSeconds?: pulumi.Input<number>;
        /**
         * The number of failures a Traffic Manager probing agent tolerates before marking that endpoint as unhealthy. Valid values are between `0` and `9`. The default value is `3`
         */
        toleratedNumberOfFailures?: pulumi.Input<number>;
    }
    interface ProfileMonitorConfigCustomHeader {
        /**
         * The name of the custom header.
         */
        name: pulumi.Input<string>;
        /**
         * The value of custom header. Applicable for HTTP and HTTPS protocol.
         */
        value: pulumi.Input<string>;
    }
}
export declare namespace videoindexer {
    interface AccountIdentity {
        /**
         * Specifies a list of user managed identity ids to be assigned. Required if `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the identity type of the Video Indexer Account. Possible values are `SystemAssigned` (where Azure will generate a Service Principal for you), `UserAssigned` where you can specify the Service Principal IDs in the `identityIds` field, and `SystemAssigned, UserAssigned` which assigns both a system managed identity as well as the specified user assigned identities.
         */
        type: pulumi.Input<string>;
    }
    interface AccountStorage {
        /**
         * The ID of the storage account to be associated with the Video Indexer Account. Changing this forces a new Video Indexer Account to be created.
         */
        storageAccountId: pulumi.Input<string>;
        /**
         * The reference to the user assigned identity to use to access the Storage Account.
         */
        userAssignedIdentityId?: pulumi.Input<string>;
    }
}
export declare namespace voice {
    interface ServicesCommunicationsGatewayServiceLocation {
        /**
         * Specifies the allowed source IP address or CIDR ranges for media.
         */
        allowedMediaSourceAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the allowed source IP address or CIDR ranges for signaling.
         */
        allowedSignalingSourceAddressPrefixes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * IP address to use to contact the ESRP from this region.
         *
         * !> **Note:** The `esrpAddresses` must be specified for each `serviceLocation` when the`e911Type` is set to `DirectToEsrp`.  The `esrpAddresses` must not be specified for each `serviceLocation` when the`e911Type` is set to `Standard`.
         */
        esrpAddresses?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the region in which the resources needed for Teams Calling will be deployed.
         */
        location: pulumi.Input<string>;
        /**
         * IP address to use to contact the operator network from this region.
         */
        operatorAddresses: pulumi.Input<pulumi.Input<string>[]>;
    }
}
export declare namespace waf {
    interface PolicyCustomRule {
        /**
         * Type of action. Possible values are `Allow`, `Block`, `JSChallenge` and `Log`.
         *
         * > **Note:** If the `ruleType` is specified as `RateLimitRule`, the `Allow` is not supported.
         */
        action: pulumi.Input<string>;
        /**
         * Describes if the policy is in enabled state or disabled state. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Specifies what grouping the rate limit will count requests by. Possible values are `ClientAddr`, `ClientAddrXFFHeader`, `GeoLocation`, `GeoLocationXFFHeader` and `None`.
         */
        groupRateLimitBy?: pulumi.Input<string>;
        /**
         * One or more `matchConditions` blocks as defined below.
         */
        matchConditions: pulumi.Input<pulumi.Input<inputs.waf.PolicyCustomRuleMatchCondition>[]>;
        /**
         * Gets name of the resource that is unique within a policy. This name can be used to access the resource.
         */
        name?: pulumi.Input<string>;
        /**
         * Describes priority of the rule. Rules with a lower value will be evaluated before rules with a higher value.
         */
        priority: pulumi.Input<number>;
        /**
         * Specifies the duration at which the rate limit policy will be applied. Should be used with `RateLimitRule` rule type. Possible values are `FiveMins` and `OneMin`.
         */
        rateLimitDuration?: pulumi.Input<string>;
        /**
         * Specifies the threshold value for the rate limit policy. Must be greater than or equal to 1 if provided.
         */
        rateLimitThreshold?: pulumi.Input<number>;
        /**
         * Describes the type of rule. Possible values are `MatchRule`, `RateLimitRule` and `Invalid`.
         */
        ruleType: pulumi.Input<string>;
    }
    interface PolicyCustomRuleMatchCondition {
        /**
         * A list of match values. This is **Required** when the `operator` is not `Any`.
         */
        matchValues?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * One or more `matchVariables` blocks as defined below.
         */
        matchVariables: pulumi.Input<pulumi.Input<inputs.waf.PolicyCustomRuleMatchConditionMatchVariable>[]>;
        /**
         * Describes if this is negate condition or not
         */
        negationCondition?: pulumi.Input<boolean>;
        /**
         * Describes operator to be matched. Possible values are `Any`, `IPMatch`, `GeoMatch`, `Equal`, `Contains`, `LessThan`, `GreaterThan`, `LessThanOrEqual`, `GreaterThanOrEqual`, `BeginsWith`, `EndsWith` and `Regex`.
         */
        operator: pulumi.Input<string>;
        /**
         * A list of transformations to do before the match is attempted. Possible values are `HtmlEntityDecode`, `Lowercase`, `RemoveNulls`, `Trim`, `Uppercase`, `UrlDecode` and `UrlEncode`.
         */
        transforms?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface PolicyCustomRuleMatchConditionMatchVariable {
        /**
         * Describes field of the matchVariable collection
         */
        selector?: pulumi.Input<string>;
        /**
         * The name of the Match Variable. Possible values are `RemoteAddr`, `RequestMethod`, `QueryString`, `PostArgs`, `RequestUri`, `RequestHeaders`, `RequestBody` and `RequestCookies`.
         */
        variableName: pulumi.Input<string>;
    }
    interface PolicyManagedRules {
        /**
         * One or more `exclusion` block defined below.
         */
        exclusions?: pulumi.Input<pulumi.Input<inputs.waf.PolicyManagedRulesExclusion>[]>;
        /**
         * One or more `managedRuleSet` block defined below.
         */
        managedRuleSets: pulumi.Input<pulumi.Input<inputs.waf.PolicyManagedRulesManagedRuleSet>[]>;
    }
    interface PolicyManagedRulesExclusion {
        /**
         * One or more `excludedRuleSet` block defined below.
         */
        excludedRuleSet?: pulumi.Input<inputs.waf.PolicyManagedRulesExclusionExcludedRuleSet>;
        /**
         * The name of the Match Variable. Possible values: `RequestArgKeys`, `RequestArgNames`, `RequestArgValues`, `RequestCookieKeys`, `RequestCookieNames`, `RequestCookieValues`, `RequestHeaderKeys`, `RequestHeaderNames`, `RequestHeaderValues`.
         */
        matchVariable: pulumi.Input<string>;
        /**
         * Describes field of the matchVariable collection.
         */
        selector: pulumi.Input<string>;
        /**
         * Describes operator to be matched. Possible values: `Contains`, `EndsWith`, `Equals`, `EqualsAny`, `StartsWith`.
         */
        selectorMatchOperator: pulumi.Input<string>;
    }
    interface PolicyManagedRulesExclusionExcludedRuleSet {
        /**
         * One or more `ruleGroup` block defined below.
         */
        ruleGroups?: pulumi.Input<pulumi.Input<inputs.waf.PolicyManagedRulesExclusionExcludedRuleSetRuleGroup>[]>;
        /**
         * The rule set type. Possible values are `Microsoft_DefaultRuleSet`, `Microsoft_BotManagerRuleSet` and `OWASP`. Defaults to `OWASP`.
         */
        type?: pulumi.Input<string>;
        /**
         * The rule set version. Possible values are `1.0`, `1.1` (for rule set type `Microsoft_BotManagerRuleSet`), `2.1`, `2.2` (for rule set type `Microsoft_DefaultRuleSet`) and `3.2` (for rule set type `OWASP`). Defaults to `3.2`.
         */
        version?: pulumi.Input<string>;
    }
    interface PolicyManagedRulesExclusionExcludedRuleSetRuleGroup {
        /**
         * One or more Rule IDs for exclusion.
         */
        excludedRules?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of rule group for exclusion. Possible values are `BadBots`, `crs20ProtocolViolations`, `crs21ProtocolAnomalies`, `crs23RequestLimits`, `crs30HttpPolicy`, `crs35BadRobots`, `crs40GenericAttacks`, `crs41SqlInjectionAttacks`, `crs41XssAttacks`, `crs42TightSecurity`, `crs45Trojans`, `crs49InboundBlocking`, `General`, `GoodBots`, `KnownBadBots`, `Known-CVEs`, `REQUEST-911-METHOD-ENFORCEMENT`, `REQUEST-913-SCANNER-DETECTION`, `REQUEST-920-PROTOCOL-ENFORCEMENT`, `REQUEST-921-PROTOCOL-ATTACK`, `REQUEST-930-APPLICATION-ATTACK-LFI`, `REQUEST-931-APPLICATION-ATTACK-RFI`, `REQUEST-932-APPLICATION-ATTACK-RCE`, `REQUEST-933-APPLICATION-ATTACK-PHP`, `REQUEST-941-APPLICATION-ATTACK-XSS`, `REQUEST-942-APPLICATION-ATTACK-SQLI`, `REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION`, `REQUEST-944-APPLICATION-ATTACK-JAVA`, `UnknownBots`, `METHOD-ENFORCEMENT`, `PROTOCOL-ENFORCEMENT`, `PROTOCOL-ATTACK`, `LFI`, `RFI`, `RCE`, `PHP`, `NODEJS`, `XSS`, `SQLI`, `FIX`, `JAVA`, `MS-ThreatIntel-WebShells`, `MS-ThreatIntel-AppSec`, `MS-ThreatIntel-SQLI`, `MS-ThreatIntel-CVEs` and `MS-ThreatIntel-XSS`.
         */
        ruleGroupName: pulumi.Input<string>;
    }
    interface PolicyManagedRulesManagedRuleSet {
        /**
         * One or more `ruleGroupOverride` block defined below.
         */
        ruleGroupOverrides?: pulumi.Input<pulumi.Input<inputs.waf.PolicyManagedRulesManagedRuleSetRuleGroupOverride>[]>;
        /**
         * The rule set type. Possible values: `Microsoft_BotManagerRuleSet`, `Microsoft_DefaultRuleSet` and `OWASP`. Defaults to `OWASP`.
         */
        type?: pulumi.Input<string>;
        /**
         * The rule set version. Possible values: `0.1`, `1.0`, `1.1`, `2.1`, `2.2`, `2.2.9`, `3.0`, `3.1` and `3.2`.
         */
        version: pulumi.Input<string>;
    }
    interface PolicyManagedRulesManagedRuleSetRuleGroupOverride {
        /**
         * The name of the Rule Group. Possible values are `BadBots`, `crs20ProtocolViolations`, `crs21ProtocolAnomalies`, `crs23RequestLimits`, `crs30HttpPolicy`, `crs35BadRobots`, `crs40GenericAttacks`, `crs41SqlInjectionAttacks`, `crs41XssAttacks`, `crs42TightSecurity`, `crs45Trojans`, `crs49InboundBlocking`, `General`, `GoodBots`, `KnownBadBots`, `Known-CVEs`, `REQUEST-911-METHOD-ENFORCEMENT`, `REQUEST-913-SCANNER-DETECTION`, `REQUEST-920-PROTOCOL-ENFORCEMENT`, `REQUEST-921-PROTOCOL-ATTACK`, `REQUEST-930-APPLICATION-ATTACK-LFI`, `REQUEST-931-APPLICATION-ATTACK-RFI`, `REQUEST-932-APPLICATION-ATTACK-RCE`, `REQUEST-933-APPLICATION-ATTACK-PHP`, `REQUEST-941-APPLICATION-ATTACK-XSS`, `REQUEST-942-APPLICATION-ATTACK-SQLI`, `REQUEST-943-APPLICATION-ATTACK-SESSION-FIXATION`, `REQUEST-944-APPLICATION-ATTACK-JAVA`, `UnknownBots`, `METHOD-ENFORCEMENT`, `PROTOCOL-ENFORCEMENT`, `PROTOCOL-ATTACK`, `LFI`, `RFI`, `RCE`, `PHP`, `NODEJS`, `XSS`, `SQLI`, `FIX`, `JAVA`, `MS-ThreatIntel-WebShells`, `MS-ThreatIntel-AppSec`, `MS-ThreatIntel-SQLI`, `MS-ThreatIntel-CVEs` and `MS-ThreatIntel-XSS`.
         */
        ruleGroupName: pulumi.Input<string>;
        /**
         * One or more `rule` block defined below.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.waf.PolicyManagedRulesManagedRuleSetRuleGroupOverrideRule>[]>;
    }
    interface PolicyManagedRulesManagedRuleSetRuleGroupOverrideRule {
        /**
         * Describes the override action to be applied when rule matches. Possible values are `Allow`, `AnomalyScoring`, `Block`, `JSChallenge` and `Log`. `JSChallenge` is only valid for rulesets of type `Microsoft_BotManagerRuleSet`.
         */
        action?: pulumi.Input<string>;
        /**
         * Describes if the managed rule is in enabled state or disabled state. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Identifier for the managed rule.
         */
        id: pulumi.Input<string>;
    }
    interface PolicyPolicySettings {
        /**
         * Describes if the policy is in enabled state or disabled state. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Whether the firewall should block a request with upload size greater then `fileUploadLimitInMb`.
         */
        fileUploadEnforcement?: pulumi.Input<boolean>;
        /**
         * The File Upload Limit in MB. Accepted values are in the range `1` to `4000`. Defaults to `100`.
         */
        fileUploadLimitInMb?: pulumi.Input<number>;
        /**
         * Specifies the JavaScript challenge cookie validity lifetime in minutes. The user is challenged after the lifetime expires. Accepted values are in the range `5` to `1440`. Defaults to `30`.
         */
        jsChallengeCookieExpirationInMinutes?: pulumi.Input<number>;
        /**
         * One `logScrubbing` block as defined below.
         */
        logScrubbing?: pulumi.Input<inputs.waf.PolicyPolicySettingsLogScrubbing>;
        /**
         * The Maximum Request Body Size in KB. Accepted values are in the range `8` to `2000`. Defaults to `128`.
         */
        maxRequestBodySizeInKb?: pulumi.Input<number>;
        /**
         * Describes if it is in detection mode or prevention mode at the policy level. Valid values are `Detection` and `Prevention`. Defaults to `Prevention`.
         */
        mode?: pulumi.Input<string>;
        /**
         * Is Request Body Inspection enabled? Defaults to `true`.
         */
        requestBodyCheck?: pulumi.Input<boolean>;
        /**
         * Whether the firewall should block a request with body size greater then `maxRequestBodySizeInKb`. Defaults to `true`.
         */
        requestBodyEnforcement?: pulumi.Input<boolean>;
        /**
         * Specifies the maximum request body inspection limit in KB for the Web Application Firewall. Defaults to `128`.
         */
        requestBodyInspectLimitInKb?: pulumi.Input<number>;
    }
    interface PolicyPolicySettingsLogScrubbing {
        /**
         * Whether the log scrubbing is enabled or disabled. Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * One or more `scrubbingRule` blocks as define below.
         */
        rules?: pulumi.Input<pulumi.Input<inputs.waf.PolicyPolicySettingsLogScrubbingRule>[]>;
    }
    interface PolicyPolicySettingsLogScrubbingRule {
        /**
         * Describes if the managed rule is in enabled state or disabled state. Defaults to `false`.
         */
        enabled?: pulumi.Input<boolean>;
        matchVariable: pulumi.Input<string>;
        /**
         * When matchVariable is a collection, operator used to specify which elements in the collection this rule applies to.
         */
        selector?: pulumi.Input<string>;
        selectorMatchOperator?: pulumi.Input<string>;
    }
}
export declare namespace webpubsub {
    interface HubEventHandler {
        /**
         * An `auth` block as defined below.
         */
        auth?: pulumi.Input<inputs.webpubsub.HubEventHandlerAuth>;
        /**
         * Specifies the list of system events. Supported values are `connect`, `connected` and `disconnected`.
         */
        systemEvents?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Event Handler URL Template. Two predefined parameters `{hub}` and `{event}` are available to use in the template. The value of the EventHandler URL is dynamically calculated when the client request comes in. Example: `http://example.com/api/{hub}/{event}`.
         */
        urlTemplate: pulumi.Input<string>;
        /**
         * Specifies the matching event names. There are 3 kind of patterns supported: * `*` matches any event name * `,` Combine multiple events with `,` for example `event1,event2`, it matches event `event1` and `event2` * The single event name, for example `event1`, it matches `event1`.
         */
        userEventPattern?: pulumi.Input<string>;
    }
    interface HubEventHandlerAuth {
        /**
         * Specify the identity ID of the target resource.
         *
         * > **Note:** `managedIdentityId` is required if the auth block is defined
         */
        managedIdentityId: pulumi.Input<string>;
    }
    interface HubEventListener {
        /**
         * Specifies the event hub name to receive the events.
         */
        eventhubName: pulumi.Input<string>;
        /**
         * Specifies the event hub namespace name to receive the events.
         */
        eventhubNamespaceName: pulumi.Input<string>;
        /**
         * Specifies the list of system events. Supported values are `connected` and `disconnected`.
         */
        systemEventNameFilters?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * Specifies the list of matching user event names. `["*"]` can be used to match all events.
         */
        userEventNameFilters?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface NetworkAclPrivateEndpoint {
        /**
         * The allowed request types for the Private Endpoint Connection. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         */
        allowedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The denied request types for the Private Endpoint Connection. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Allow`, `allowedRequestTypes`cannot be set. When `defaultAction` is `Deny`, `deniedRequestTypes`cannot be set.
         */
        deniedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The ID of the Private Endpoint which is based on the Web Pubsub service.
         */
        id: pulumi.Input<string>;
    }
    interface NetworkAclPublicNetwork {
        /**
         * The allowed request types for the public network. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         */
        allowedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The denied request types for the public network. Possible values are `ClientConnection`, `ServerConnection`, `RESTAPI` and `Trace`.
         *
         * > **Note:** When `defaultAction` is `Allow`, `allowedRequestTypes`cannot be set. When `defaultAction` is `Deny`, `deniedRequestTypes`cannot be set.
         */
        deniedRequestTypes?: pulumi.Input<pulumi.Input<string>[]>;
    }
    interface ServiceIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs to be assigned to this Web PubSub.
         *
         * > **Note:** This is required when `type` is set to `UserAssigned`
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The Principal ID associated with this Managed Service Identity.
         */
        principalId?: pulumi.Input<string>;
        /**
         * The Tenant ID associated with this Managed Service Identity.
         */
        tenantId?: pulumi.Input<string>;
        /**
         * Specifies the type of Managed Service Identity that should be configured on this Web PubSub. Possible values are `SystemAssigned`, `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ServiceLiveTrace {
        /**
         * Whether the log category `ConnectivityLogs` is enabled? Defaults to `true`
         */
        connectivityLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Whether the live trace is enabled? Defaults to `true`.
         */
        enabled?: pulumi.Input<boolean>;
        /**
         * Whether the log category `HttpRequestLogs` is enabled? Defaults to `true`
         */
        httpRequestLogsEnabled?: pulumi.Input<boolean>;
        /**
         * Whether the log category `MessagingLogs` is enabled? Defaults to `true`
         */
        messagingLogsEnabled?: pulumi.Input<boolean>;
    }
    interface SocketioIdentity {
        /**
         * Specifies a list of User Assigned Managed Identity IDs for this Web PubSub Service.
         *
         * > **Note:** `identityIds` is required when `type` is `UserAssigned`.
         */
        identityIds?: pulumi.Input<pulumi.Input<string>[]>;
        principalId?: pulumi.Input<string>;
        tenantId?: pulumi.Input<string>;
        /**
         * The type of Managed Identity for this Web PubSub Service. Possible Values are `SystemAssigned` and `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface SocketioSku {
        /**
         * The number of units associated with this Web PubSub Service. Defaults to `1`. Possible values are `1`, `2`, `3`, `4`, `5`, `6`, `7`, `8`, `9`, `10`, `20`, `30`, `40`, `50`, `60`, `70`, `80`, `90`, `100`, `200`, `300`, `400`, `500`, `600`, `700`, `800`, `900` and `1000`.
         *
         * > **Note:** The valid range depends on which `sku` is used. For `Free_F1` only `1` is supported, for `Standard_S1` and `Premium_P1` `1` through `100` are supported, and for `Premium_P2` the minimum capacity is `100`.
         */
        capacity?: pulumi.Input<number>;
        /**
         * The SKU to use for this Web PubSub Service. Possible values are `Free_F1`, `Standard_S1`, `Premium_P1`, and `Premium_P2`.
         */
        name: pulumi.Input<string>;
    }
}
export declare namespace workloadssap {
    interface DiscoveryVirtualInstanceIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this SAP Discovery Virtual Instance.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this SAP Discovery Virtual Instance. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this SAP Single Node Virtual Instance.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this SAP Single Node Virtual Instance. The only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfiguration {
        /**
         * The name of the application Resource Group where SAP system resources will be deployed. Changing this forces a new resource to be created.
         *
         * > **Note:** While creating an SAP Single Node Virtual Instance, the service will provision the extra SAP systems/components in the `appResourceGroupName` that are not defined in the HCL Configuration. At this time, if the `appResourceGroupName` is different from the Resource Group where SAP Single Node Virtual Instance exists, you can set `preventDeletionIfContainsResources` to `false` to delete all resources defined in the HCL Configuration and the resources created in the `appResourceGroupName` with `terraform destroy`. However, if the `appResourceGroupName` is the same with the Resource Group where SAP Single Node Virtual Instance exists, some resources, such as the subnet defined in the HCL Configuration, cannot be deleted with `terraform destroy` since the resources defined in the HCL Configuration are being referenced by the SAP system/component. In this case, you have to manually delete the SAP system/component before deleting the resources in the HCL Configuration.
         */
        appResourceGroupName: pulumi.Input<string>;
        /**
         * The supported SAP database type. Possible values are `DB2` and `HANA`. Changing this forces a new resource to be created.
         */
        databaseType?: pulumi.Input<string>;
        /**
         * One or more `diskVolumeConfiguration` blocks as defined below. Changing this forces a new resource to be created.
         */
        diskVolumeConfigurations?: pulumi.Input<pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationDiskVolumeConfiguration>[]>;
        /**
         * Specifies whether a secondary IP address should be added to the network interface on all VMs of the SAP system being deployed. Defaults to `false`. Changing this forces a new resource to be created.
         */
        secondaryIpEnabled?: pulumi.Input<boolean>;
        /**
         * The resource ID of the Subnet for the SAP Single Node Virtual Instance. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        virtualMachineConfiguration: pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfiguration>;
        /**
         * A `virtualMachineResourceNames` block as defined below. Changing this forces a new resource to be created.
         */
        virtualMachineResourceNames?: pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNames>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationDiskVolumeConfiguration {
        /**
         * The total number of disks required for the concerned volume. Possible values are at least `1`. Changing this forces a new resource to be created.
         */
        numberOfDisks: pulumi.Input<number>;
        /**
         * The size of the Disk in GB. Changing this forces a new resource to be created.
         */
        sizeInGb: pulumi.Input<number>;
        /**
         * The name of the Disk SKU. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
         */
        skuName: pulumi.Input<string>;
        /**
         * Specifies the volumn name of the database disk. Possible values are `backup`, `hana/data`, `hana/log`, `hana/shared`, `os` and `usr/sap`. Changing this forces a new resource to be created.
         */
        volumeName: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfiguration {
        /**
         * An `image` block as defined below. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationImage>;
        /**
         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
         */
        osProfile: pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationOsProfile>;
        /**
         * The size of the Virtual Machine. Changing this forces a new resource to be created.
         */
        virtualMachineSize: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationImage {
        /**
         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineConfigurationOsProfile {
        /**
         * The name of the administrator account. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPrivateKey: pulumi.Input<string>;
        /**
         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPublicKey: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNames {
        /**
         * (Optional) One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
         */
        dataDisks?: pulumi.Input<pulumi.Input<inputs.workloadssap.SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNamesDataDisk>[]>;
        /**
         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
         */
        hostName?: pulumi.Input<string>;
        /**
         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
         */
        networkInterfaceNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
         */
        osDiskName?: pulumi.Input<string>;
        /**
         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
         */
        virtualMachineName?: pulumi.Input<string>;
    }
    interface SingleNodeVirtualInstanceSingleServerConfigurationVirtualMachineResourceNamesDataDisk {
        /**
         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
         */
        names: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Volume. The only possible value is `default`. Changing this forces a new resource to be created.
         */
        volumeName: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceIdentity {
        /**
         * A list of User Assigned Managed Identity IDs to be assigned to this SAP Three Tier Virtual Instance.
         */
        identityIds: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The type of Managed Service Identity that should be configured on this SAP Three Tier Virtual Instance. Only possible value is `UserAssigned`.
         */
        type: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfiguration {
        /**
         * The name of the application Resource Group where SAP system resources will be deployed. Changing this forces a new resource to be created.
         *
         * > **Note:** While creating an SAP Three Tier Virtual Instance, the service will provision the extra SAP systems/components in the `appResourceGroupName` that are not defined in the HCL Configuration. At this time, if the `appResourceGroupName` is different from the Resource Group where SAP Three Tier Virtual Instance exists, you can set `preventDeletionIfContainsResources` to `false` to delete all resources defined in the HCL Configurations and the resources created in the `appResourceGroupName` with `terraform destroy`. However, if the `appResourceGroupName` is the same with the Resource Group where SAP Three Tier Virtual Instance exists, some resources, such as the subnet defined in the HCL Configuration, cannot be deleted with `terraform destroy` since the resources defined in the HCL Configuration are being referenced by the SAP system/component. In this case, you have to manually delete the SAP system/component before deleting the resources in the HCL Configuration.
         */
        appResourceGroupName: pulumi.Input<string>;
        /**
         * An `applicationServerConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        applicationServerConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfiguration>;
        /**
         * A `centralServerConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        centralServerConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfiguration>;
        /**
         * A `databaseServerConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        databaseServerConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfiguration>;
        /**
         * The high availability type for the three tier configuration. Possible values are `AvailabilitySet` and `AvailabilityZone`. Changing this forces a new resource to be created.
         */
        highAvailabilityType?: pulumi.Input<string>;
        /**
         * A `resourceNames` block as defined below. Changing this forces a new resource to be created.
         */
        resourceNames?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNames>;
        /**
         * Specifies whether a secondary IP address should be added to the network interface on all VMs of the SAP system being deployed. Defaults to `false`. Changing this forces a new resource to be created.
         */
        secondaryIpEnabled?: pulumi.Input<boolean>;
        /**
         * A `transportCreateAndMount` block as defined below. Changing this forces a new resource to be created.
         *
         * > **Note:** The file share configuration uses `skip` by default when `transportCreateAndMount` isn't set.
         *
         * > **Note:** Due to [a bug in the Azure API](https://github.com/Azure/azure-rest-api-specs/issues/25209) where the Storage File Share Id is not defined correctly, it is not currently possible to support using Transport Mount.
         */
        transportCreateAndMount?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationTransportCreateAndMount>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfiguration {
        /**
         * The number of instances for the Application Server. Possible values are at least `1`. Changing this forces a new resource to be created.
         */
        instanceCount: pulumi.Input<number>;
        /**
         * The resource ID of the Subnet for the Application Server. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        virtualMachineConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfiguration>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfiguration {
        /**
         * An `image` block as defined below. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationImage>;
        /**
         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
         */
        osProfile: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationOsProfile>;
        /**
         * The size of the Virtual Machine. Changing this forces a new resource to be created.
         */
        virtualMachineSize: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationImage {
        /**
         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationApplicationServerConfigurationVirtualMachineConfigurationOsProfile {
        /**
         * The name of the administrator account. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPrivateKey: pulumi.Input<string>;
        /**
         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPublicKey: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfiguration {
        /**
         * The number of instances for the Central Server. Possible values are at least `1`. Changing this forces a new resource to be created.
         */
        instanceCount: pulumi.Input<number>;
        /**
         * The resource ID of the Subnet for the Central Server. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        virtualMachineConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfiguration>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfiguration {
        /**
         * An `image` block as defined below. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationImage>;
        /**
         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
         */
        osProfile: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationOsProfile>;
        /**
         * The size of the Virtual Machine. Changing this forces a new resource to be created.
         */
        virtualMachineSize: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationImage {
        /**
         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationCentralServerConfigurationVirtualMachineConfigurationOsProfile {
        /**
         * The name of the administrator account. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPrivateKey: pulumi.Input<string>;
        /**
         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPublicKey: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfiguration {
        /**
         * The database type for the Database Server. Possible values are `DB2` and `HANA`. Changing this forces a new resource to be created.
         */
        databaseType?: pulumi.Input<string>;
        /**
         * One or more `diskVolumeConfiguration` blocks as defined below. Changing this forces a new resource to be created.
         */
        diskVolumeConfigurations?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationDiskVolumeConfiguration>[]>;
        /**
         * The number of instances for the Database Server. Possible values are at least `1`. Changing this forces a new resource to be created.
         */
        instanceCount: pulumi.Input<number>;
        /**
         * The resource ID of the Subnet for the Database Server. Changing this forces a new resource to be created.
         */
        subnetId: pulumi.Input<string>;
        /**
         * A `virtualMachineConfiguration` block as defined below. Changing this forces a new resource to be created.
         */
        virtualMachineConfiguration: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfiguration>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationDiskVolumeConfiguration {
        /**
         * The total number of disks required for the concerned volume. Possible values are at least `1`. Changing this forces a new resource to be created.
         */
        numberOfDisks: pulumi.Input<number>;
        /**
         * The size of the Disk in GB. Changing this forces a new resource to be created.
         */
        sizeInGb: pulumi.Input<number>;
        /**
         * The name of the Disk SKU. Possible values are `Premium_LRS`, `PremiumV2_LRS`, `Premium_ZRS`, `Standard_LRS`, `StandardSSD_LRS`, `StandardSSD_ZRS` and `UltraSSD_LRS`. Changing this forces a new resource to be created.
         */
        skuName: pulumi.Input<string>;
        /**
         * Specifies the volumn name of the database disk. Possible values are `backup`, `hana/data`, `hana/log`, `hana/shared`, `os` and `usr/sap`. Changing this forces a new resource to be created.
         */
        volumeName: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfiguration {
        /**
         * An `image` block as defined below. Changing this forces a new resource to be created.
         */
        image: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationImage>;
        /**
         * An `osProfile` block as defined below. Changing this forces a new resource to be created.
         */
        osProfile: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationOsProfile>;
        /**
         * The size of the Virtual Machine. Changing this forces a new resource to be created.
         */
        virtualMachineSize: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationImage {
        /**
         * Specifies the offer of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        offer: pulumi.Input<string>;
        /**
         * The publisher of the Image. Possible values are `RedHat` and `SUSE`. Changing this forces a new resource to be created.
         */
        publisher: pulumi.Input<string>;
        /**
         * The SKU of the Image. Changing this forces a new resource to be created.
         */
        sku: pulumi.Input<string>;
        /**
         * Specifies the version of the platform image or marketplace image used to create the virtual machine. Changing this forces a new resource to be created.
         */
        version: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationDatabaseServerConfigurationVirtualMachineConfigurationOsProfile {
        /**
         * The name of the administrator account. Changing this forces a new resource to be created.
         */
        adminUsername: pulumi.Input<string>;
        /**
         * The SSH public key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPrivateKey: pulumi.Input<string>;
        /**
         * The SSH private key that is used to authenticate with the Virtual Machine. Changing this forces a new resource to be created.
         */
        sshPublicKey: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNames {
        /**
         * An `applicationServer` block as defined below. Changing this forces a new resource to be created.
         */
        applicationServer?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServer>;
        /**
         * A `centralServer` block as defined below. Changing this forces a new resource to be created.
         */
        centralServer?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServer>;
        /**
         * A `databaseServer` block as defined below. Changing this forces a new resource to be created.
         */
        databaseServer?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServer>;
        /**
         * A `sharedStorage` block as defined below. Changing this forces a new resource to be created.
         */
        sharedStorage?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesSharedStorage>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServer {
        /**
         * The full name for the availability set. Changing this forces a new resource to be created.
         */
        availabilitySetName?: pulumi.Input<string>;
        /**
         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
         */
        virtualMachines?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachine>[]>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachine {
        /**
         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
         */
        dataDisks?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachineDataDisk>[]>;
        /**
         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
         */
        hostName?: pulumi.Input<string>;
        /**
         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
         */
        networkInterfaceNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
         */
        osDiskName?: pulumi.Input<string>;
        /**
         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
         */
        virtualMachineName?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesApplicationServerVirtualMachineDataDisk {
        /**
         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
         */
        names: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Volume. Possible values are `default`, `hanaData`, `hanaLog`, `hanaShared` and `usrSap`. Changing this forces a new resource to be created.
         *
         * > **Note:** Possible value for Application Server and Central Server is `default`.
         *
         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
         */
        volumeName: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServer {
        /**
         * The full name for the availability set. Changing this forces a new resource to be created.
         */
        availabilitySetName?: pulumi.Input<string>;
        /**
         * A `loadBalancer` block as defined below. Changing this forces a new resource to be created.
         */
        loadBalancer?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerLoadBalancer>;
        /**
         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
         */
        virtualMachines?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachine>[]>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerLoadBalancer {
        /**
         * A list of Backend Pool names for the Load Balancer. Changing this forces a new resource to be created.
         */
        backendPoolNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Frontend IP Configuration names. Changing this forces a new resource to be created.
         */
        frontendIpConfigurationNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Health Probe names. Changing this forces a new resource to be created.
         */
        healthProbeNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full resource name of the Load Balancer. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachine {
        /**
         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
         */
        dataDisks?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachineDataDisk>[]>;
        /**
         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
         */
        hostName?: pulumi.Input<string>;
        /**
         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
         */
        networkInterfaceNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
         */
        osDiskName?: pulumi.Input<string>;
        /**
         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
         */
        virtualMachineName?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesCentralServerVirtualMachineDataDisk {
        /**
         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
         */
        names: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Volume. Possible values are `default`, `hanaData`, `hanaLog`, `hanaShared` and `usrSap`. Changing this forces a new resource to be created.
         *
         * > **Note:** Possible value for Application Server and Central Server is `default`.
         *
         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
         */
        volumeName: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServer {
        /**
         * The full name for the availability set. Changing this forces a new resource to be created.
         */
        availabilitySetName?: pulumi.Input<string>;
        /**
         * A `loadBalancer` block as defined below. Changing this forces a new resource to be created.
         */
        loadBalancer?: pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerLoadBalancer>;
        /**
         * One or more `virtualMachine` blocks as defined below. Changing this forces a new resource to be created.
         */
        virtualMachines?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachine>[]>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerLoadBalancer {
        /**
         * A list of Backend Pool names for the Load Balancer. Changing this forces a new resource to be created.
         */
        backendPoolNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Frontend IP Configuration names. Changing this forces a new resource to be created.
         */
        frontendIpConfigurationNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * A list of Health Probe names. Changing this forces a new resource to be created.
         */
        healthProbeNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full resource name of the Load Balancer. Changing this forces a new resource to be created.
         */
        name?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachine {
        /**
         * One or more `dataDisk` blocks as defined below. Changing this forces a new resource to be created.
         */
        dataDisks?: pulumi.Input<pulumi.Input<inputs.workloadssap.ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachineDataDisk>[]>;
        /**
         * The full name of the host of the Virtual Machine. Changing this forces a new resource to be created.
         */
        hostName?: pulumi.Input<string>;
        /**
         * A list of full names for the Network Interface of the Virtual Machine. Changing this forces a new resource to be created.
         */
        networkInterfaceNames?: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The full name of the OS Disk attached to the Virtual Machine. Changing this forces a new resource to be created.
         */
        osDiskName?: pulumi.Input<string>;
        /**
         * The full name of the Virtual Machine in a single server SAP system. Changing this forces a new resource to be created.
         */
        virtualMachineName?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesDatabaseServerVirtualMachineDataDisk {
        /**
         * A list of full names of Data Disks per Volume. Changing this forces a new resource to be created.
         */
        names: pulumi.Input<pulumi.Input<string>[]>;
        /**
         * The name of the Volume. Possible values are `default`, `hanaData`, `hanaLog`, `hanaShared` and `usrSap`. Changing this forces a new resource to be created.
         *
         * > **Note:** Possible value for Application Server and Central Server is `default`.
         *
         * > **Note:** Possible values for Database Server are `hanaData`, `hanaLog`, `hanaShared` and `usrSap`.
         */
        volumeName: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationResourceNamesSharedStorage {
        /**
         * The full name of the Shared Storage Account. Changing this forces a new resource to be created.
         */
        accountName?: pulumi.Input<string>;
        /**
         * The full name of Private Endpoint for the Shared Storage Account. Changing this forces a new resource to be created.
         */
        privateEndpointName?: pulumi.Input<string>;
    }
    interface ThreeTierVirtualInstanceThreeTierConfigurationTransportCreateAndMount {
        /**
         * The ID of the Resource Group of the transport File Share. Changing this forces a new resource to be created.
         */
        resourceGroupId?: pulumi.Input<string>;
        /**
         * The name of the Storage Account of the File Share. Changing this forces a new resource to be created.
         */
        storageAccountName?: pulumi.Input<string>;
    }
}