Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. compute
  5. GalleryInVMAccessControlProfileVersion
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.compute.GalleryInVMAccessControlProfileVersion

Explore with Pulumi AI

This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native

Specifies information about the gallery inVMAccessControlProfile version that you want to create or update.

Uses Azure REST API version 2024-03-03. In version 2.x of the Azure Native provider, it used API version 2024-03-03.

Example Usage

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var galleryInVMAccessControlProfileVersion = new AzureNative.Compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", new()
    {
        DefaultAccess = AzureNative.Compute.EndpointAccess.Allow,
        ExcludeFromLatest = false,
        GalleryName = "myGalleryName",
        InVMAccessControlProfileName = "myInVMAccessControlProfileName",
        InVMAccessControlProfileVersionName = "1.0.0",
        Location = "West US",
        Mode = AzureNative.Compute.AccessControlRulesMode.Audit,
        ResourceGroupName = "myResourceGroup",
        Rules = new AzureNative.Compute.Inputs.AccessControlRulesArgs
        {
            Identities = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesIdentityArgs
                {
                    ExePath = "C:\\Windows\\System32\\cscript.exe",
                    GroupName = "Administrators",
                    Name = "WinPA",
                    ProcessName = "cscript",
                    UserName = "SYSTEM",
                },
            },
            Privileges = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesPrivilegeArgs
                {
                    Name = "GoalState",
                    Path = "/machine",
                    QueryParameters = 
                    {
                        { "comp", "goalstate" },
                    },
                },
            },
            RoleAssignments = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesRoleAssignmentArgs
                {
                    Identities = new[]
                    {
                        "WinPA",
                    },
                    Role = "Provisioning",
                },
            },
            Roles = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesRoleArgs
                {
                    Name = "Provisioning",
                    Privileges = new[]
                    {
                        "GoalState",
                    },
                },
            },
        },
        TargetLocations = new[]
        {
            new AzureNative.Compute.Inputs.TargetRegionArgs
            {
                Name = "West US",
            },
            new AzureNative.Compute.Inputs.TargetRegionArgs
            {
                Name = "South Central US",
            },
        },
    });

});
Copy
package main

import (
	compute "github.com/pulumi/pulumi-azure-native-sdk/compute/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := compute.NewGalleryInVMAccessControlProfileVersion(ctx, "galleryInVMAccessControlProfileVersion", &compute.GalleryInVMAccessControlProfileVersionArgs{
			DefaultAccess:                       pulumi.String(compute.EndpointAccessAllow),
			ExcludeFromLatest:                   pulumi.Bool(false),
			GalleryName:                         pulumi.String("myGalleryName"),
			InVMAccessControlProfileName:        pulumi.String("myInVMAccessControlProfileName"),
			InVMAccessControlProfileVersionName: pulumi.String("1.0.0"),
			Location:                            pulumi.String("West US"),
			Mode:                                pulumi.String(compute.AccessControlRulesModeAudit),
			ResourceGroupName:                   pulumi.String("myResourceGroup"),
			Rules: &compute.AccessControlRulesArgs{
				Identities: compute.AccessControlRulesIdentityArray{
					&compute.AccessControlRulesIdentityArgs{
						ExePath:     pulumi.String("C:\\Windows\\System32\\cscript.exe"),
						GroupName:   pulumi.String("Administrators"),
						Name:        pulumi.String("WinPA"),
						ProcessName: pulumi.String("cscript"),
						UserName:    pulumi.String("SYSTEM"),
					},
				},
				Privileges: compute.AccessControlRulesPrivilegeArray{
					&compute.AccessControlRulesPrivilegeArgs{
						Name: pulumi.String("GoalState"),
						Path: pulumi.String("/machine"),
						QueryParameters: pulumi.StringMap{
							"comp": pulumi.String("goalstate"),
						},
					},
				},
				RoleAssignments: compute.AccessControlRulesRoleAssignmentArray{
					&compute.AccessControlRulesRoleAssignmentArgs{
						Identities: pulumi.StringArray{
							pulumi.String("WinPA"),
						},
						Role: pulumi.String("Provisioning"),
					},
				},
				Roles: compute.AccessControlRulesRoleArray{
					&compute.AccessControlRulesRoleArgs{
						Name: pulumi.String("Provisioning"),
						Privileges: pulumi.StringArray{
							pulumi.String("GoalState"),
						},
					},
				},
			},
			TargetLocations: compute.TargetRegionArray{
				&compute.TargetRegionArgs{
					Name: pulumi.String("West US"),
				},
				&compute.TargetRegionArgs{
					Name: pulumi.String("South Central US"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.compute.GalleryInVMAccessControlProfileVersion;
import com.pulumi.azurenative.compute.GalleryInVMAccessControlProfileVersionArgs;
import com.pulumi.azurenative.compute.inputs.AccessControlRulesArgs;
import com.pulumi.azurenative.compute.inputs.TargetRegionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var galleryInVMAccessControlProfileVersion = new GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", GalleryInVMAccessControlProfileVersionArgs.builder()
            .defaultAccess("Allow")
            .excludeFromLatest(false)
            .galleryName("myGalleryName")
            .inVMAccessControlProfileName("myInVMAccessControlProfileName")
            .inVMAccessControlProfileVersionName("1.0.0")
            .location("West US")
            .mode("Audit")
            .resourceGroupName("myResourceGroup")
            .rules(AccessControlRulesArgs.builder()
                .identities(AccessControlRulesIdentityArgs.builder()
                    .exePath("C:\\Windows\\System32\\cscript.exe")
                    .groupName("Administrators")
                    .name("WinPA")
                    .processName("cscript")
                    .userName("SYSTEM")
                    .build())
                .privileges(AccessControlRulesPrivilegeArgs.builder()
                    .name("GoalState")
                    .path("/machine")
                    .queryParameters(Map.of("comp", "goalstate"))
                    .build())
                .roleAssignments(AccessControlRulesRoleAssignmentArgs.builder()
                    .identities("WinPA")
                    .role("Provisioning")
                    .build())
                .roles(AccessControlRulesRoleArgs.builder()
                    .name("Provisioning")
                    .privileges("GoalState")
                    .build())
                .build())
            .targetLocations(            
                TargetRegionArgs.builder()
                    .name("West US")
                    .build(),
                TargetRegionArgs.builder()
                    .name("South Central US")
                    .build())
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const galleryInVMAccessControlProfileVersion = new azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", {
    defaultAccess: azure_native.compute.EndpointAccess.Allow,
    excludeFromLatest: false,
    galleryName: "myGalleryName",
    inVMAccessControlProfileName: "myInVMAccessControlProfileName",
    inVMAccessControlProfileVersionName: "1.0.0",
    location: "West US",
    mode: azure_native.compute.AccessControlRulesMode.Audit,
    resourceGroupName: "myResourceGroup",
    rules: {
        identities: [{
            exePath: "C:\\Windows\\System32\\cscript.exe",
            groupName: "Administrators",
            name: "WinPA",
            processName: "cscript",
            userName: "SYSTEM",
        }],
        privileges: [{
            name: "GoalState",
            path: "/machine",
            queryParameters: {
                comp: "goalstate",
            },
        }],
        roleAssignments: [{
            identities: ["WinPA"],
            role: "Provisioning",
        }],
        roles: [{
            name: "Provisioning",
            privileges: ["GoalState"],
        }],
    },
    targetLocations: [
        {
            name: "West US",
        },
        {
            name: "South Central US",
        },
    ],
});
Copy
import pulumi
import pulumi_azure_native as azure_native

gallery_in_vm_access_control_profile_version = azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion",
    default_access=azure_native.compute.EndpointAccess.ALLOW,
    exclude_from_latest=False,
    gallery_name="myGalleryName",
    in_vm_access_control_profile_name="myInVMAccessControlProfileName",
    in_vm_access_control_profile_version_name="1.0.0",
    location="West US",
    mode=azure_native.compute.AccessControlRulesMode.AUDIT,
    resource_group_name="myResourceGroup",
    rules={
        "identities": [{
            "exe_path": "C:\\Windows\\System32\\cscript.exe",
            "group_name": "Administrators",
            "name": "WinPA",
            "process_name": "cscript",
            "user_name": "SYSTEM",
        }],
        "privileges": [{
            "name": "GoalState",
            "path": "/machine",
            "query_parameters": {
                "comp": "goalstate",
            },
        }],
        "role_assignments": [{
            "identities": ["WinPA"],
            "role": "Provisioning",
        }],
        "roles": [{
            "name": "Provisioning",
            "privileges": ["GoalState"],
        }],
    },
    target_locations=[
        {
            "name": "West US",
        },
        {
            "name": "South Central US",
        },
    ])
Copy
resources:
  galleryInVMAccessControlProfileVersion:
    type: azure-native:compute:GalleryInVMAccessControlProfileVersion
    properties:
      defaultAccess: Allow
      excludeFromLatest: false
      galleryName: myGalleryName
      inVMAccessControlProfileName: myInVMAccessControlProfileName
      inVMAccessControlProfileVersionName: 1.0.0
      location: West US
      mode: Audit
      resourceGroupName: myResourceGroup
      rules:
        identities:
          - exePath: C:\Windows\System32\cscript.exe
            groupName: Administrators
            name: WinPA
            processName: cscript
            userName: SYSTEM
        privileges:
          - name: GoalState
            path: /machine
            queryParameters:
              comp: goalstate
        roleAssignments:
          - identities:
              - WinPA
            role: Provisioning
        roles:
          - name: Provisioning
            privileges:
              - GoalState
      targetLocations:
        - name: West US
        - name: South Central US
Copy

Create GalleryInVMAccessControlProfileVersion Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new GalleryInVMAccessControlProfileVersion(name: string, args: GalleryInVMAccessControlProfileVersionArgs, opts?: CustomResourceOptions);
@overload
def GalleryInVMAccessControlProfileVersion(resource_name: str,
                                           args: GalleryInVMAccessControlProfileVersionArgs,
                                           opts: Optional[ResourceOptions] = None)

@overload
def GalleryInVMAccessControlProfileVersion(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           default_access: Optional[Union[str, EndpointAccess]] = None,
                                           gallery_name: Optional[str] = None,
                                           in_vm_access_control_profile_name: Optional[str] = None,
                                           mode: Optional[Union[str, AccessControlRulesMode]] = None,
                                           resource_group_name: Optional[str] = None,
                                           exclude_from_latest: Optional[bool] = None,
                                           in_vm_access_control_profile_version_name: Optional[str] = None,
                                           location: Optional[str] = None,
                                           rules: Optional[AccessControlRulesArgs] = None,
                                           tags: Optional[Mapping[str, str]] = None,
                                           target_locations: Optional[Sequence[TargetRegionArgs]] = None)
func NewGalleryInVMAccessControlProfileVersion(ctx *Context, name string, args GalleryInVMAccessControlProfileVersionArgs, opts ...ResourceOption) (*GalleryInVMAccessControlProfileVersion, error)
public GalleryInVMAccessControlProfileVersion(string name, GalleryInVMAccessControlProfileVersionArgs args, CustomResourceOptions? opts = null)
public GalleryInVMAccessControlProfileVersion(String name, GalleryInVMAccessControlProfileVersionArgs args)
public GalleryInVMAccessControlProfileVersion(String name, GalleryInVMAccessControlProfileVersionArgs args, CustomResourceOptions options)

type: azure-native:compute:GalleryInVMAccessControlProfileVersion
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. GalleryInVMAccessControlProfileVersionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. GalleryInVMAccessControlProfileVersionArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. GalleryInVMAccessControlProfileVersionArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. GalleryInVMAccessControlProfileVersionArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. GalleryInVMAccessControlProfileVersionArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var galleryInVMAccessControlProfileVersionResource = new AzureNative.Compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", new()
{
    DefaultAccess = "string",
    GalleryName = "string",
    InVMAccessControlProfileName = "string",
    Mode = "string",
    ResourceGroupName = "string",
    ExcludeFromLatest = false,
    InVMAccessControlProfileVersionName = "string",
    Location = "string",
    Rules = new AzureNative.Compute.Inputs.AccessControlRulesArgs
    {
        Identities = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesIdentityArgs
            {
                Name = "string",
                ExePath = "string",
                GroupName = "string",
                ProcessName = "string",
                UserName = "string",
            },
        },
        Privileges = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesPrivilegeArgs
            {
                Name = "string",
                Path = "string",
                QueryParameters = 
                {
                    { "string", "string" },
                },
            },
        },
        RoleAssignments = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesRoleAssignmentArgs
            {
                Identities = new[]
                {
                    "string",
                },
                Role = "string",
            },
        },
        Roles = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesRoleArgs
            {
                Name = "string",
                Privileges = new[]
                {
                    "string",
                },
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
    TargetLocations = new[]
    {
        new AzureNative.Compute.Inputs.TargetRegionArgs
        {
            Name = "string",
            AdditionalReplicaSets = new[]
            {
                new AzureNative.Compute.Inputs.AdditionalReplicaSetArgs
                {
                    RegionalReplicaCount = 0,
                    StorageAccountType = "string",
                },
            },
            Encryption = new AzureNative.Compute.Inputs.EncryptionImagesArgs
            {
                DataDiskImages = new[]
                {
                    new AzureNative.Compute.Inputs.DataDiskImageEncryptionArgs
                    {
                        Lun = 0,
                        DiskEncryptionSetId = "string",
                    },
                },
                OsDiskImage = new AzureNative.Compute.Inputs.OSDiskImageEncryptionArgs
                {
                    DiskEncryptionSetId = "string",
                    SecurityProfile = new AzureNative.Compute.Inputs.OSDiskImageSecurityProfileArgs
                    {
                        ConfidentialVMEncryptionType = "string",
                        SecureVMDiskEncryptionSetId = "string",
                    },
                },
            },
            ExcludeFromLatest = false,
            RegionalReplicaCount = 0,
            StorageAccountType = "string",
        },
    },
});
Copy
example, err := compute.NewGalleryInVMAccessControlProfileVersion(ctx, "galleryInVMAccessControlProfileVersionResource", &compute.GalleryInVMAccessControlProfileVersionArgs{
	DefaultAccess:                       pulumi.String("string"),
	GalleryName:                         pulumi.String("string"),
	InVMAccessControlProfileName:        pulumi.String("string"),
	Mode:                                pulumi.String("string"),
	ResourceGroupName:                   pulumi.String("string"),
	ExcludeFromLatest:                   pulumi.Bool(false),
	InVMAccessControlProfileVersionName: pulumi.String("string"),
	Location:                            pulumi.String("string"),
	Rules: &compute.AccessControlRulesArgs{
		Identities: compute.AccessControlRulesIdentityArray{
			&compute.AccessControlRulesIdentityArgs{
				Name:        pulumi.String("string"),
				ExePath:     pulumi.String("string"),
				GroupName:   pulumi.String("string"),
				ProcessName: pulumi.String("string"),
				UserName:    pulumi.String("string"),
			},
		},
		Privileges: compute.AccessControlRulesPrivilegeArray{
			&compute.AccessControlRulesPrivilegeArgs{
				Name: pulumi.String("string"),
				Path: pulumi.String("string"),
				QueryParameters: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		RoleAssignments: compute.AccessControlRulesRoleAssignmentArray{
			&compute.AccessControlRulesRoleAssignmentArgs{
				Identities: pulumi.StringArray{
					pulumi.String("string"),
				},
				Role: pulumi.String("string"),
			},
		},
		Roles: compute.AccessControlRulesRoleArray{
			&compute.AccessControlRulesRoleArgs{
				Name: pulumi.String("string"),
				Privileges: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TargetLocations: compute.TargetRegionArray{
		&compute.TargetRegionArgs{
			Name: pulumi.String("string"),
			AdditionalReplicaSets: compute.AdditionalReplicaSetArray{
				&compute.AdditionalReplicaSetArgs{
					RegionalReplicaCount: pulumi.Int(0),
					StorageAccountType:   pulumi.String("string"),
				},
			},
			Encryption: &compute.EncryptionImagesArgs{
				DataDiskImages: compute.DataDiskImageEncryptionArray{
					&compute.DataDiskImageEncryptionArgs{
						Lun:                 pulumi.Int(0),
						DiskEncryptionSetId: pulumi.String("string"),
					},
				},
				OsDiskImage: &compute.OSDiskImageEncryptionArgs{
					DiskEncryptionSetId: pulumi.String("string"),
					SecurityProfile: &compute.OSDiskImageSecurityProfileArgs{
						ConfidentialVMEncryptionType: pulumi.String("string"),
						SecureVMDiskEncryptionSetId:  pulumi.String("string"),
					},
				},
			},
			ExcludeFromLatest:    pulumi.Bool(false),
			RegionalReplicaCount: pulumi.Int(0),
			StorageAccountType:   pulumi.String("string"),
		},
	},
})
Copy
var galleryInVMAccessControlProfileVersionResource = new GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", GalleryInVMAccessControlProfileVersionArgs.builder()
    .defaultAccess("string")
    .galleryName("string")
    .inVMAccessControlProfileName("string")
    .mode("string")
    .resourceGroupName("string")
    .excludeFromLatest(false)
    .inVMAccessControlProfileVersionName("string")
    .location("string")
    .rules(AccessControlRulesArgs.builder()
        .identities(AccessControlRulesIdentityArgs.builder()
            .name("string")
            .exePath("string")
            .groupName("string")
            .processName("string")
            .userName("string")
            .build())
        .privileges(AccessControlRulesPrivilegeArgs.builder()
            .name("string")
            .path("string")
            .queryParameters(Map.of("string", "string"))
            .build())
        .roleAssignments(AccessControlRulesRoleAssignmentArgs.builder()
            .identities("string")
            .role("string")
            .build())
        .roles(AccessControlRulesRoleArgs.builder()
            .name("string")
            .privileges("string")
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .targetLocations(TargetRegionArgs.builder()
        .name("string")
        .additionalReplicaSets(AdditionalReplicaSetArgs.builder()
            .regionalReplicaCount(0)
            .storageAccountType("string")
            .build())
        .encryption(EncryptionImagesArgs.builder()
            .dataDiskImages(DataDiskImageEncryptionArgs.builder()
                .lun(0)
                .diskEncryptionSetId("string")
                .build())
            .osDiskImage(OSDiskImageEncryptionArgs.builder()
                .diskEncryptionSetId("string")
                .securityProfile(OSDiskImageSecurityProfileArgs.builder()
                    .confidentialVMEncryptionType("string")
                    .secureVMDiskEncryptionSetId("string")
                    .build())
                .build())
            .build())
        .excludeFromLatest(false)
        .regionalReplicaCount(0)
        .storageAccountType("string")
        .build())
    .build());
Copy
gallery_in_vm_access_control_profile_version_resource = azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource",
    default_access="string",
    gallery_name="string",
    in_vm_access_control_profile_name="string",
    mode="string",
    resource_group_name="string",
    exclude_from_latest=False,
    in_vm_access_control_profile_version_name="string",
    location="string",
    rules={
        "identities": [{
            "name": "string",
            "exe_path": "string",
            "group_name": "string",
            "process_name": "string",
            "user_name": "string",
        }],
        "privileges": [{
            "name": "string",
            "path": "string",
            "query_parameters": {
                "string": "string",
            },
        }],
        "role_assignments": [{
            "identities": ["string"],
            "role": "string",
        }],
        "roles": [{
            "name": "string",
            "privileges": ["string"],
        }],
    },
    tags={
        "string": "string",
    },
    target_locations=[{
        "name": "string",
        "additional_replica_sets": [{
            "regional_replica_count": 0,
            "storage_account_type": "string",
        }],
        "encryption": {
            "data_disk_images": [{
                "lun": 0,
                "disk_encryption_set_id": "string",
            }],
            "os_disk_image": {
                "disk_encryption_set_id": "string",
                "security_profile": {
                    "confidential_vm_encryption_type": "string",
                    "secure_vm_disk_encryption_set_id": "string",
                },
            },
        },
        "exclude_from_latest": False,
        "regional_replica_count": 0,
        "storage_account_type": "string",
    }])
Copy
const galleryInVMAccessControlProfileVersionResource = new azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", {
    defaultAccess: "string",
    galleryName: "string",
    inVMAccessControlProfileName: "string",
    mode: "string",
    resourceGroupName: "string",
    excludeFromLatest: false,
    inVMAccessControlProfileVersionName: "string",
    location: "string",
    rules: {
        identities: [{
            name: "string",
            exePath: "string",
            groupName: "string",
            processName: "string",
            userName: "string",
        }],
        privileges: [{
            name: "string",
            path: "string",
            queryParameters: {
                string: "string",
            },
        }],
        roleAssignments: [{
            identities: ["string"],
            role: "string",
        }],
        roles: [{
            name: "string",
            privileges: ["string"],
        }],
    },
    tags: {
        string: "string",
    },
    targetLocations: [{
        name: "string",
        additionalReplicaSets: [{
            regionalReplicaCount: 0,
            storageAccountType: "string",
        }],
        encryption: {
            dataDiskImages: [{
                lun: 0,
                diskEncryptionSetId: "string",
            }],
            osDiskImage: {
                diskEncryptionSetId: "string",
                securityProfile: {
                    confidentialVMEncryptionType: "string",
                    secureVMDiskEncryptionSetId: "string",
                },
            },
        },
        excludeFromLatest: false,
        regionalReplicaCount: 0,
        storageAccountType: "string",
    }],
});
Copy
type: azure-native:compute:GalleryInVMAccessControlProfileVersion
properties:
    defaultAccess: string
    excludeFromLatest: false
    galleryName: string
    inVMAccessControlProfileName: string
    inVMAccessControlProfileVersionName: string
    location: string
    mode: string
    resourceGroupName: string
    rules:
        identities:
            - exePath: string
              groupName: string
              name: string
              processName: string
              userName: string
        privileges:
            - name: string
              path: string
              queryParameters:
                string: string
        roleAssignments:
            - identities:
                - string
              role: string
        roles:
            - name: string
              privileges:
                - string
    tags:
        string: string
    targetLocations:
        - additionalReplicaSets:
            - regionalReplicaCount: 0
              storageAccountType: string
          encryption:
            dataDiskImages:
                - diskEncryptionSetId: string
                  lun: 0
            osDiskImage:
                diskEncryptionSetId: string
                securityProfile:
                    confidentialVMEncryptionType: string
                    secureVMDiskEncryptionSetId: string
          excludeFromLatest: false
          name: string
          regionalReplicaCount: 0
          storageAccountType: string
Copy

GalleryInVMAccessControlProfileVersion Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The GalleryInVMAccessControlProfileVersion resource accepts the following input properties:

DefaultAccess This property is required. string | Pulumi.AzureNative.Compute.EndpointAccess
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
GalleryName
This property is required.
Changes to this property will trigger replacement.
string
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
InVMAccessControlProfileName
This property is required.
Changes to this property will trigger replacement.
string
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
Mode This property is required. string | Pulumi.AzureNative.Compute.AccessControlRulesMode
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group.
ExcludeFromLatest bool
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
InVMAccessControlProfileVersionName Changes to this property will trigger replacement. string
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
Location string
Resource location
Rules Pulumi.AzureNative.Compute.Inputs.AccessControlRules
This is the Access Control Rules specification for an inVMAccessControlProfile version.
Tags Dictionary<string, string>
Resource tags
TargetLocations List<Pulumi.AzureNative.Compute.Inputs.TargetRegion>
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
DefaultAccess This property is required. string | EndpointAccess
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
GalleryName
This property is required.
Changes to this property will trigger replacement.
string
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
InVMAccessControlProfileName
This property is required.
Changes to this property will trigger replacement.
string
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
Mode This property is required. string | AccessControlRulesMode
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group.
ExcludeFromLatest bool
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
InVMAccessControlProfileVersionName Changes to this property will trigger replacement. string
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
Location string
Resource location
Rules AccessControlRulesArgs
This is the Access Control Rules specification for an inVMAccessControlProfile version.
Tags map[string]string
Resource tags
TargetLocations []TargetRegionArgs
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
defaultAccess This property is required. String | EndpointAccess
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
galleryName
This property is required.
Changes to this property will trigger replacement.
String
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
inVMAccessControlProfileName
This property is required.
Changes to this property will trigger replacement.
String
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
mode This property is required. String | AccessControlRulesMode
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group.
excludeFromLatest Boolean
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
inVMAccessControlProfileVersionName Changes to this property will trigger replacement. String
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
location String
Resource location
rules AccessControlRules
This is the Access Control Rules specification for an inVMAccessControlProfile version.
tags Map<String,String>
Resource tags
targetLocations List<TargetRegion>
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
defaultAccess This property is required. string | EndpointAccess
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
galleryName
This property is required.
Changes to this property will trigger replacement.
string
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
inVMAccessControlProfileName
This property is required.
Changes to this property will trigger replacement.
string
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
mode This property is required. string | AccessControlRulesMode
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group.
excludeFromLatest boolean
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
inVMAccessControlProfileVersionName Changes to this property will trigger replacement. string
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
location string
Resource location
rules AccessControlRules
This is the Access Control Rules specification for an inVMAccessControlProfile version.
tags {[key: string]: string}
Resource tags
targetLocations TargetRegion[]
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
default_access This property is required. str | EndpointAccess
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
gallery_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
in_vm_access_control_profile_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
mode This property is required. str | AccessControlRulesMode
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group.
exclude_from_latest bool
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
in_vm_access_control_profile_version_name Changes to this property will trigger replacement. str
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
location str
Resource location
rules AccessControlRulesArgs
This is the Access Control Rules specification for an inVMAccessControlProfile version.
tags Mapping[str, str]
Resource tags
target_locations Sequence[TargetRegionArgs]
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
defaultAccess This property is required. String | "Allow" | "Deny"
This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
galleryName
This property is required.
Changes to this property will trigger replacement.
String
The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
inVMAccessControlProfileName
This property is required.
Changes to this property will trigger replacement.
String
The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
mode This property is required. String | "Audit" | "Enforce" | "Disabled"
This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group.
excludeFromLatest Boolean
If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
inVMAccessControlProfileVersionName Changes to this property will trigger replacement. String
The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
location String
Resource location
rules Property Map
This is the Access Control Rules specification for an inVMAccessControlProfile version.
tags Map<String>
Resource tags
targetLocations List<Property Map>
The target regions where the Resource Profile version is going to be replicated to. This property is updatable.

Outputs

All input properties are implicitly available as output properties. Additionally, the GalleryInVMAccessControlProfileVersion resource produces the following output properties:

AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
ProvisioningState string
The provisioning state, which only appears in the response.
PublishedDate string
The timestamp for when the Resource Profile Version is published.
ReplicationStatus Pulumi.AzureNative.Compute.Outputs.ReplicationStatusResponse
This is the replication status of the gallery image version.
Type string
Resource type
AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
Resource name
ProvisioningState string
The provisioning state, which only appears in the response.
PublishedDate string
The timestamp for when the Resource Profile Version is published.
ReplicationStatus ReplicationStatusResponse
This is the replication status of the gallery image version.
Type string
Resource type
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
provisioningState String
The provisioning state, which only appears in the response.
publishedDate String
The timestamp for when the Resource Profile Version is published.
replicationStatus ReplicationStatusResponse
This is the replication status of the gallery image version.
type String
Resource type
azureApiVersion string
The Azure API version of the resource.
id string
The provider-assigned unique ID for this managed resource.
name string
Resource name
provisioningState string
The provisioning state, which only appears in the response.
publishedDate string
The timestamp for when the Resource Profile Version is published.
replicationStatus ReplicationStatusResponse
This is the replication status of the gallery image version.
type string
Resource type
azure_api_version str
The Azure API version of the resource.
id str
The provider-assigned unique ID for this managed resource.
name str
Resource name
provisioning_state str
The provisioning state, which only appears in the response.
published_date str
The timestamp for when the Resource Profile Version is published.
replication_status ReplicationStatusResponse
This is the replication status of the gallery image version.
type str
Resource type
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
Resource name
provisioningState String
The provisioning state, which only appears in the response.
publishedDate String
The timestamp for when the Resource Profile Version is published.
replicationStatus Property Map
This is the replication status of the gallery image version.
type String
Resource type

Supporting Types

AccessControlRules
, AccessControlRulesArgs

identities List<Property Map>
A list of identities.
privileges List<Property Map>
A list of privileges.
roleAssignments List<Property Map>
A list of role assignments.
roles List<Property Map>
A list of roles.

AccessControlRulesIdentity
, AccessControlRulesIdentityArgs

Name This property is required. string
The name of the identity.
ExePath string
The path to the executable.
GroupName string
The groupName corresponding to this identity.
ProcessName string
The process name of the executable.
UserName string
The username corresponding to this identity.
Name This property is required. string
The name of the identity.
ExePath string
The path to the executable.
GroupName string
The groupName corresponding to this identity.
ProcessName string
The process name of the executable.
UserName string
The username corresponding to this identity.
name This property is required. String
The name of the identity.
exePath String
The path to the executable.
groupName String
The groupName corresponding to this identity.
processName String
The process name of the executable.
userName String
The username corresponding to this identity.
name This property is required. string
The name of the identity.
exePath string
The path to the executable.
groupName string
The groupName corresponding to this identity.
processName string
The process name of the executable.
userName string
The username corresponding to this identity.
name This property is required. str
The name of the identity.
exe_path str
The path to the executable.
group_name str
The groupName corresponding to this identity.
process_name str
The process name of the executable.
user_name str
The username corresponding to this identity.
name This property is required. String
The name of the identity.
exePath String
The path to the executable.
groupName String
The groupName corresponding to this identity.
processName String
The process name of the executable.
userName String
The username corresponding to this identity.

AccessControlRulesIdentityResponse
, AccessControlRulesIdentityResponseArgs

Name This property is required. string
The name of the identity.
ExePath string
The path to the executable.
GroupName string
The groupName corresponding to this identity.
ProcessName string
The process name of the executable.
UserName string
The username corresponding to this identity.
Name This property is required. string
The name of the identity.
ExePath string
The path to the executable.
GroupName string
The groupName corresponding to this identity.
ProcessName string
The process name of the executable.
UserName string
The username corresponding to this identity.
name This property is required. String
The name of the identity.
exePath String
The path to the executable.
groupName String
The groupName corresponding to this identity.
processName String
The process name of the executable.
userName String
The username corresponding to this identity.
name This property is required. string
The name of the identity.
exePath string
The path to the executable.
groupName string
The groupName corresponding to this identity.
processName string
The process name of the executable.
userName string
The username corresponding to this identity.
name This property is required. str
The name of the identity.
exe_path str
The path to the executable.
group_name str
The groupName corresponding to this identity.
process_name str
The process name of the executable.
user_name str
The username corresponding to this identity.
name This property is required. String
The name of the identity.
exePath String
The path to the executable.
groupName String
The groupName corresponding to this identity.
processName String
The process name of the executable.
userName String
The username corresponding to this identity.

AccessControlRulesMode
, AccessControlRulesModeArgs

Audit
Audit
Enforce
Enforce
Disabled
Disabled
AccessControlRulesModeAudit
Audit
AccessControlRulesModeEnforce
Enforce
AccessControlRulesModeDisabled
Disabled
Audit
Audit
Enforce
Enforce
Disabled
Disabled
Audit
Audit
Enforce
Enforce
Disabled
Disabled
AUDIT
Audit
ENFORCE
Enforce
DISABLED
Disabled
"Audit"
Audit
"Enforce"
Enforce
"Disabled"
Disabled

AccessControlRulesPrivilege
, AccessControlRulesPrivilegeArgs

Name This property is required. string
The name of the privilege.
Path This property is required. string
The HTTP path corresponding to the privilege.
QueryParameters Dictionary<string, string>
The query parameters to match in the path.
Name This property is required. string
The name of the privilege.
Path This property is required. string
The HTTP path corresponding to the privilege.
QueryParameters map[string]string
The query parameters to match in the path.
name This property is required. String
The name of the privilege.
path This property is required. String
The HTTP path corresponding to the privilege.
queryParameters Map<String,String>
The query parameters to match in the path.
name This property is required. string
The name of the privilege.
path This property is required. string
The HTTP path corresponding to the privilege.
queryParameters {[key: string]: string}
The query parameters to match in the path.
name This property is required. str
The name of the privilege.
path This property is required. str
The HTTP path corresponding to the privilege.
query_parameters Mapping[str, str]
The query parameters to match in the path.
name This property is required. String
The name of the privilege.
path This property is required. String
The HTTP path corresponding to the privilege.
queryParameters Map<String>
The query parameters to match in the path.

AccessControlRulesPrivilegeResponse
, AccessControlRulesPrivilegeResponseArgs

Name This property is required. string
The name of the privilege.
Path This property is required. string
The HTTP path corresponding to the privilege.
QueryParameters Dictionary<string, string>
The query parameters to match in the path.
Name This property is required. string
The name of the privilege.
Path This property is required. string
The HTTP path corresponding to the privilege.
QueryParameters map[string]string
The query parameters to match in the path.
name This property is required. String
The name of the privilege.
path This property is required. String
The HTTP path corresponding to the privilege.
queryParameters Map<String,String>
The query parameters to match in the path.
name This property is required. string
The name of the privilege.
path This property is required. string
The HTTP path corresponding to the privilege.
queryParameters {[key: string]: string}
The query parameters to match in the path.
name This property is required. str
The name of the privilege.
path This property is required. str
The HTTP path corresponding to the privilege.
query_parameters Mapping[str, str]
The query parameters to match in the path.
name This property is required. String
The name of the privilege.
path This property is required. String
The HTTP path corresponding to the privilege.
queryParameters Map<String>
The query parameters to match in the path.

AccessControlRulesResponse
, AccessControlRulesResponseArgs

identities List<Property Map>
A list of identities.
privileges List<Property Map>
A list of privileges.
roleAssignments List<Property Map>
A list of role assignments.
roles List<Property Map>
A list of roles.

AccessControlRulesRole
, AccessControlRulesRoleArgs

Name This property is required. string
The name of the role.
Privileges This property is required. List<string>
A list of privileges needed by this role.
Name This property is required. string
The name of the role.
Privileges This property is required. []string
A list of privileges needed by this role.
name This property is required. String
The name of the role.
privileges This property is required. List<String>
A list of privileges needed by this role.
name This property is required. string
The name of the role.
privileges This property is required. string[]
A list of privileges needed by this role.
name This property is required. str
The name of the role.
privileges This property is required. Sequence[str]
A list of privileges needed by this role.
name This property is required. String
The name of the role.
privileges This property is required. List<String>
A list of privileges needed by this role.

AccessControlRulesRoleAssignment
, AccessControlRulesRoleAssignmentArgs

Identities This property is required. List<string>
A list of identities that can access the privileges defined by the role.
Role This property is required. string
The name of the role.
Identities This property is required. []string
A list of identities that can access the privileges defined by the role.
Role This property is required. string
The name of the role.
identities This property is required. List<String>
A list of identities that can access the privileges defined by the role.
role This property is required. String
The name of the role.
identities This property is required. string[]
A list of identities that can access the privileges defined by the role.
role This property is required. string
The name of the role.
identities This property is required. Sequence[str]
A list of identities that can access the privileges defined by the role.
role This property is required. str
The name of the role.
identities This property is required. List<String>
A list of identities that can access the privileges defined by the role.
role This property is required. String
The name of the role.

AccessControlRulesRoleAssignmentResponse
, AccessControlRulesRoleAssignmentResponseArgs

Identities This property is required. List<string>
A list of identities that can access the privileges defined by the role.
Role This property is required. string
The name of the role.
Identities This property is required. []string
A list of identities that can access the privileges defined by the role.
Role This property is required. string
The name of the role.
identities This property is required. List<String>
A list of identities that can access the privileges defined by the role.
role This property is required. String
The name of the role.
identities This property is required. string[]
A list of identities that can access the privileges defined by the role.
role This property is required. string
The name of the role.
identities This property is required. Sequence[str]
A list of identities that can access the privileges defined by the role.
role This property is required. str
The name of the role.
identities This property is required. List<String>
A list of identities that can access the privileges defined by the role.
role This property is required. String
The name of the role.

AccessControlRulesRoleResponse
, AccessControlRulesRoleResponseArgs

Name This property is required. string
The name of the role.
Privileges This property is required. List<string>
A list of privileges needed by this role.
Name This property is required. string
The name of the role.
Privileges This property is required. []string
A list of privileges needed by this role.
name This property is required. String
The name of the role.
privileges This property is required. List<String>
A list of privileges needed by this role.
name This property is required. string
The name of the role.
privileges This property is required. string[]
A list of privileges needed by this role.
name This property is required. str
The name of the role.
privileges This property is required. Sequence[str]
A list of privileges needed by this role.
name This property is required. String
The name of the role.
privileges This property is required. List<String>
A list of privileges needed by this role.

AdditionalReplicaSet
, AdditionalReplicaSetArgs

RegionalReplicaCount int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
StorageAccountType string | Pulumi.AzureNative.Compute.StorageAccountType
Specifies the storage account type to be used to create the direct drive replicas
RegionalReplicaCount int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
StorageAccountType string | StorageAccountType
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount Integer
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType String | StorageAccountType
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount number
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType string | StorageAccountType
Specifies the storage account type to be used to create the direct drive replicas
regional_replica_count int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storage_account_type str | StorageAccountType
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount Number
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType String | "Standard_LRS" | "Standard_ZRS" | "Premium_LRS" | "PremiumV2_LRS"
Specifies the storage account type to be used to create the direct drive replicas

AdditionalReplicaSetResponse
, AdditionalReplicaSetResponseArgs

RegionalReplicaCount int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
StorageAccountType string
Specifies the storage account type to be used to create the direct drive replicas
RegionalReplicaCount int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
StorageAccountType string
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount Integer
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType String
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount number
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType string
Specifies the storage account type to be used to create the direct drive replicas
regional_replica_count int
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storage_account_type str
Specifies the storage account type to be used to create the direct drive replicas
regionalReplicaCount Number
The number of direct drive replicas of the Image Version to be created.This Property is updatable
storageAccountType String
Specifies the storage account type to be used to create the direct drive replicas

ConfidentialVMEncryptionType
, ConfidentialVMEncryptionTypeArgs

EncryptedVMGuestStateOnlyWithPmk
EncryptedVMGuestStateOnlyWithPmk
EncryptedWithPmk
EncryptedWithPmk
EncryptedWithCmk
EncryptedWithCmk
NonPersistedTPM
NonPersistedTPM
ConfidentialVMEncryptionTypeEncryptedVMGuestStateOnlyWithPmk
EncryptedVMGuestStateOnlyWithPmk
ConfidentialVMEncryptionTypeEncryptedWithPmk
EncryptedWithPmk
ConfidentialVMEncryptionTypeEncryptedWithCmk
EncryptedWithCmk
ConfidentialVMEncryptionTypeNonPersistedTPM
NonPersistedTPM
EncryptedVMGuestStateOnlyWithPmk
EncryptedVMGuestStateOnlyWithPmk
EncryptedWithPmk
EncryptedWithPmk
EncryptedWithCmk
EncryptedWithCmk
NonPersistedTPM
NonPersistedTPM
EncryptedVMGuestStateOnlyWithPmk
EncryptedVMGuestStateOnlyWithPmk
EncryptedWithPmk
EncryptedWithPmk
EncryptedWithCmk
EncryptedWithCmk
NonPersistedTPM
NonPersistedTPM
ENCRYPTED_VM_GUEST_STATE_ONLY_WITH_PMK
EncryptedVMGuestStateOnlyWithPmk
ENCRYPTED_WITH_PMK
EncryptedWithPmk
ENCRYPTED_WITH_CMK
EncryptedWithCmk
NON_PERSISTED_TPM
NonPersistedTPM
"EncryptedVMGuestStateOnlyWithPmk"
EncryptedVMGuestStateOnlyWithPmk
"EncryptedWithPmk"
EncryptedWithPmk
"EncryptedWithCmk"
EncryptedWithCmk
"NonPersistedTPM"
NonPersistedTPM

DataDiskImageEncryption
, DataDiskImageEncryptionArgs

Lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
Lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. Integer
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. number
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
disk_encryption_set_id str
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. Number
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.

DataDiskImageEncryptionResponse
, DataDiskImageEncryptionResponseArgs

Lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
Lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. Integer
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. number
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. int
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
disk_encryption_set_id str
A relative URI containing the resource ID of the disk encryption set.
lun This property is required. Number
This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.

EncryptionImages
, EncryptionImagesArgs

DataDiskImages List<Pulumi.AzureNative.Compute.Inputs.DataDiskImageEncryption>
A list of encryption specifications for data disk images.
OsDiskImage Pulumi.AzureNative.Compute.Inputs.OSDiskImageEncryption
Contains encryption settings for an OS disk image.
DataDiskImages []DataDiskImageEncryption
A list of encryption specifications for data disk images.
OsDiskImage OSDiskImageEncryption
Contains encryption settings for an OS disk image.
dataDiskImages List<DataDiskImageEncryption>
A list of encryption specifications for data disk images.
osDiskImage OSDiskImageEncryption
Contains encryption settings for an OS disk image.
dataDiskImages DataDiskImageEncryption[]
A list of encryption specifications for data disk images.
osDiskImage OSDiskImageEncryption
Contains encryption settings for an OS disk image.
data_disk_images Sequence[DataDiskImageEncryption]
A list of encryption specifications for data disk images.
os_disk_image OSDiskImageEncryption
Contains encryption settings for an OS disk image.
dataDiskImages List<Property Map>
A list of encryption specifications for data disk images.
osDiskImage Property Map
Contains encryption settings for an OS disk image.

EncryptionImagesResponse
, EncryptionImagesResponseArgs

DataDiskImages List<Pulumi.AzureNative.Compute.Inputs.DataDiskImageEncryptionResponse>
A list of encryption specifications for data disk images.
OsDiskImage Pulumi.AzureNative.Compute.Inputs.OSDiskImageEncryptionResponse
Contains encryption settings for an OS disk image.
DataDiskImages []DataDiskImageEncryptionResponse
A list of encryption specifications for data disk images.
OsDiskImage OSDiskImageEncryptionResponse
Contains encryption settings for an OS disk image.
dataDiskImages List<DataDiskImageEncryptionResponse>
A list of encryption specifications for data disk images.
osDiskImage OSDiskImageEncryptionResponse
Contains encryption settings for an OS disk image.
dataDiskImages DataDiskImageEncryptionResponse[]
A list of encryption specifications for data disk images.
osDiskImage OSDiskImageEncryptionResponse
Contains encryption settings for an OS disk image.
data_disk_images Sequence[DataDiskImageEncryptionResponse]
A list of encryption specifications for data disk images.
os_disk_image OSDiskImageEncryptionResponse
Contains encryption settings for an OS disk image.
dataDiskImages List<Property Map>
A list of encryption specifications for data disk images.
osDiskImage Property Map
Contains encryption settings for an OS disk image.

EndpointAccess
, EndpointAccessArgs

Allow
Allow
Deny
Deny
EndpointAccessAllow
Allow
EndpointAccessDeny
Deny
Allow
Allow
Deny
Deny
Allow
Allow
Deny
Deny
ALLOW
Allow
DENY
Deny
"Allow"
Allow
"Deny"
Deny

OSDiskImageEncryption
, OSDiskImageEncryptionArgs

DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
SecurityProfile Pulumi.AzureNative.Compute.Inputs.OSDiskImageSecurityProfile
This property specifies the security profile of an OS disk image.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
SecurityProfile OSDiskImageSecurityProfile
This property specifies the security profile of an OS disk image.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
securityProfile OSDiskImageSecurityProfile
This property specifies the security profile of an OS disk image.
diskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
securityProfile OSDiskImageSecurityProfile
This property specifies the security profile of an OS disk image.
disk_encryption_set_id str
A relative URI containing the resource ID of the disk encryption set.
security_profile OSDiskImageSecurityProfile
This property specifies the security profile of an OS disk image.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
securityProfile Property Map
This property specifies the security profile of an OS disk image.

OSDiskImageEncryptionResponse
, OSDiskImageEncryptionResponseArgs

DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
SecurityProfile Pulumi.AzureNative.Compute.Inputs.OSDiskImageSecurityProfileResponse
This property specifies the security profile of an OS disk image.
DiskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
SecurityProfile OSDiskImageSecurityProfileResponse
This property specifies the security profile of an OS disk image.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
securityProfile OSDiskImageSecurityProfileResponse
This property specifies the security profile of an OS disk image.
diskEncryptionSetId string
A relative URI containing the resource ID of the disk encryption set.
securityProfile OSDiskImageSecurityProfileResponse
This property specifies the security profile of an OS disk image.
disk_encryption_set_id str
A relative URI containing the resource ID of the disk encryption set.
security_profile OSDiskImageSecurityProfileResponse
This property specifies the security profile of an OS disk image.
diskEncryptionSetId String
A relative URI containing the resource ID of the disk encryption set.
securityProfile Property Map
This property specifies the security profile of an OS disk image.

OSDiskImageSecurityProfile
, OSDiskImageSecurityProfileArgs

ConfidentialVMEncryptionType string | Pulumi.AzureNative.Compute.ConfidentialVMEncryptionType
confidential VM encryption types
SecureVMDiskEncryptionSetId string
secure VM disk encryption set id
ConfidentialVMEncryptionType string | ConfidentialVMEncryptionType
confidential VM encryption types
SecureVMDiskEncryptionSetId string
secure VM disk encryption set id
confidentialVMEncryptionType String | ConfidentialVMEncryptionType
confidential VM encryption types
secureVMDiskEncryptionSetId String
secure VM disk encryption set id
confidentialVMEncryptionType string | ConfidentialVMEncryptionType
confidential VM encryption types
secureVMDiskEncryptionSetId string
secure VM disk encryption set id
confidential_vm_encryption_type str | ConfidentialVMEncryptionType
confidential VM encryption types
secure_vm_disk_encryption_set_id str
secure VM disk encryption set id

OSDiskImageSecurityProfileResponse
, OSDiskImageSecurityProfileResponseArgs

ConfidentialVMEncryptionType string
confidential VM encryption types
SecureVMDiskEncryptionSetId string
secure VM disk encryption set id
ConfidentialVMEncryptionType string
confidential VM encryption types
SecureVMDiskEncryptionSetId string
secure VM disk encryption set id
confidentialVMEncryptionType String
confidential VM encryption types
secureVMDiskEncryptionSetId String
secure VM disk encryption set id
confidentialVMEncryptionType string
confidential VM encryption types
secureVMDiskEncryptionSetId string
secure VM disk encryption set id
confidential_vm_encryption_type str
confidential VM encryption types
secure_vm_disk_encryption_set_id str
secure VM disk encryption set id
confidentialVMEncryptionType String
confidential VM encryption types
secureVMDiskEncryptionSetId String
secure VM disk encryption set id

RegionalReplicationStatusResponse
, RegionalReplicationStatusResponseArgs

Details This property is required. string
The details of the replication status.
Progress This property is required. int
It indicates progress of the replication job.
Region This property is required. string
The region to which the gallery image version is being replicated to.
State This property is required. string
This is the regional replication state.
Details This property is required. string
The details of the replication status.
Progress This property is required. int
It indicates progress of the replication job.
Region This property is required. string
The region to which the gallery image version is being replicated to.
State This property is required. string
This is the regional replication state.
details This property is required. String
The details of the replication status.
progress This property is required. Integer
It indicates progress of the replication job.
region This property is required. String
The region to which the gallery image version is being replicated to.
state This property is required. String
This is the regional replication state.
details This property is required. string
The details of the replication status.
progress This property is required. number
It indicates progress of the replication job.
region This property is required. string
The region to which the gallery image version is being replicated to.
state This property is required. string
This is the regional replication state.
details This property is required. str
The details of the replication status.
progress This property is required. int
It indicates progress of the replication job.
region This property is required. str
The region to which the gallery image version is being replicated to.
state This property is required. str
This is the regional replication state.
details This property is required. String
The details of the replication status.
progress This property is required. Number
It indicates progress of the replication job.
region This property is required. String
The region to which the gallery image version is being replicated to.
state This property is required. String
This is the regional replication state.

ReplicationStatusResponse
, ReplicationStatusResponseArgs

AggregatedState This property is required. string
This is the aggregated replication status based on all the regional replication status flags.
Summary This property is required. List<Pulumi.AzureNative.Compute.Inputs.RegionalReplicationStatusResponse>
This is a summary of replication status for each region.
AggregatedState This property is required. string
This is the aggregated replication status based on all the regional replication status flags.
Summary This property is required. []RegionalReplicationStatusResponse
This is a summary of replication status for each region.
aggregatedState This property is required. String
This is the aggregated replication status based on all the regional replication status flags.
summary This property is required. List<RegionalReplicationStatusResponse>
This is a summary of replication status for each region.
aggregatedState This property is required. string
This is the aggregated replication status based on all the regional replication status flags.
summary This property is required. RegionalReplicationStatusResponse[]
This is a summary of replication status for each region.
aggregated_state This property is required. str
This is the aggregated replication status based on all the regional replication status flags.
summary This property is required. Sequence[RegionalReplicationStatusResponse]
This is a summary of replication status for each region.
aggregatedState This property is required. String
This is the aggregated replication status based on all the regional replication status flags.
summary This property is required. List<Property Map>
This is a summary of replication status for each region.

StorageAccountType
, StorageAccountTypeArgs

Standard_LRS
Standard_LRS
Standard_ZRS
Standard_ZRS
Premium_LRS
Premium_LRS
PremiumV2_LRS
PremiumV2_LRS
StorageAccountType_Standard_LRS
Standard_LRS
StorageAccountType_Standard_ZRS
Standard_ZRS
StorageAccountType_Premium_LRS
Premium_LRS
StorageAccountType_PremiumV2_LRS
PremiumV2_LRS
Standard_LRS
Standard_LRS
Standard_ZRS
Standard_ZRS
Premium_LRS
Premium_LRS
PremiumV2_LRS
PremiumV2_LRS
Standard_LRS
Standard_LRS
Standard_ZRS
Standard_ZRS
Premium_LRS
Premium_LRS
PremiumV2_LRS
PremiumV2_LRS
STANDARD_LRS
Standard_LRS
STANDARD_ZRS
Standard_ZRS
PREMIUM_LRS
Premium_LRS
PREMIUM_V2_LRS
PremiumV2_LRS
"Standard_LRS"
Standard_LRS
"Standard_ZRS"
Standard_ZRS
"Premium_LRS"
Premium_LRS
"PremiumV2_LRS"
PremiumV2_LRS

TargetRegion
, TargetRegionArgs

Name This property is required. string
The name of the region.
AdditionalReplicaSets List<Pulumi.AzureNative.Compute.Inputs.AdditionalReplicaSet>
List of storage sku with replica count to create direct drive replicas.
Encryption Pulumi.AzureNative.Compute.Inputs.EncryptionImages
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
ExcludeFromLatest bool
Contains the flag setting to hide an image when users specify version='latest'
RegionalReplicaCount int
The number of replicas of the Image Version to be created per region. This property is updatable.
StorageAccountType string | Pulumi.AzureNative.Compute.StorageAccountType
Specifies the storage account type to be used to store the image. This property is not updatable.
Name This property is required. string
The name of the region.
AdditionalReplicaSets []AdditionalReplicaSet
List of storage sku with replica count to create direct drive replicas.
Encryption EncryptionImages
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
ExcludeFromLatest bool
Contains the flag setting to hide an image when users specify version='latest'
RegionalReplicaCount int
The number of replicas of the Image Version to be created per region. This property is updatable.
StorageAccountType string | StorageAccountType
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. String
The name of the region.
additionalReplicaSets List<AdditionalReplicaSet>
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImages
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest Boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount Integer
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType String | StorageAccountType
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. string
The name of the region.
additionalReplicaSets AdditionalReplicaSet[]
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImages
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount number
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType string | StorageAccountType
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. str
The name of the region.
additional_replica_sets Sequence[AdditionalReplicaSet]
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImages
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
exclude_from_latest bool
Contains the flag setting to hide an image when users specify version='latest'
regional_replica_count int
The number of replicas of the Image Version to be created per region. This property is updatable.
storage_account_type str | StorageAccountType
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. String
The name of the region.
additionalReplicaSets List<Property Map>
List of storage sku with replica count to create direct drive replicas.
encryption Property Map
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest Boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount Number
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType String | "Standard_LRS" | "Standard_ZRS" | "Premium_LRS" | "PremiumV2_LRS"
Specifies the storage account type to be used to store the image. This property is not updatable.

TargetRegionResponse
, TargetRegionResponseArgs

Name This property is required. string
The name of the region.
AdditionalReplicaSets List<Pulumi.AzureNative.Compute.Inputs.AdditionalReplicaSetResponse>
List of storage sku with replica count to create direct drive replicas.
Encryption Pulumi.AzureNative.Compute.Inputs.EncryptionImagesResponse
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
ExcludeFromLatest bool
Contains the flag setting to hide an image when users specify version='latest'
RegionalReplicaCount int
The number of replicas of the Image Version to be created per region. This property is updatable.
StorageAccountType string
Specifies the storage account type to be used to store the image. This property is not updatable.
Name This property is required. string
The name of the region.
AdditionalReplicaSets []AdditionalReplicaSetResponse
List of storage sku with replica count to create direct drive replicas.
Encryption EncryptionImagesResponse
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
ExcludeFromLatest bool
Contains the flag setting to hide an image when users specify version='latest'
RegionalReplicaCount int
The number of replicas of the Image Version to be created per region. This property is updatable.
StorageAccountType string
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. String
The name of the region.
additionalReplicaSets List<AdditionalReplicaSetResponse>
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImagesResponse
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest Boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount Integer
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType String
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. string
The name of the region.
additionalReplicaSets AdditionalReplicaSetResponse[]
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImagesResponse
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount number
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType string
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. str
The name of the region.
additional_replica_sets Sequence[AdditionalReplicaSetResponse]
List of storage sku with replica count to create direct drive replicas.
encryption EncryptionImagesResponse
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
exclude_from_latest bool
Contains the flag setting to hide an image when users specify version='latest'
regional_replica_count int
The number of replicas of the Image Version to be created per region. This property is updatable.
storage_account_type str
Specifies the storage account type to be used to store the image. This property is not updatable.
name This property is required. String
The name of the region.
additionalReplicaSets List<Property Map>
List of storage sku with replica count to create direct drive replicas.
encryption Property Map
Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
excludeFromLatest Boolean
Contains the flag setting to hide an image when users specify version='latest'
regionalReplicaCount Number
The number of replicas of the Image Version to be created per region. This property is updatable.
storageAccountType String
Specifies the storage account type to be used to store the image. This property is not updatable.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:compute:GalleryInVMAccessControlProfileVersion 1.0.0 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/galleries/{galleryName}/inVMAccessControlProfiles/{inVMAccessControlProfileName}/versions/{inVMAccessControlProfileVersionName}
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.0.1 published on Monday, Apr 7, 2025 by Pulumi
pulumi/pulumi-azure-native