Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. compute
  5. GalleryInVMAccessControlProfileVersion
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.compute.GalleryInVMAccessControlProfileVersion

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

    Specifies information about the gallery inVMAccessControlProfile version that you want to create or update. Azure REST API version: 2024-03-03.

    Example Usage

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var galleryInVMAccessControlProfileVersion = new AzureNative.Compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", new()
    {
        DefaultAccess = AzureNative.Compute.EndpointAccess.Allow,
        ExcludeFromLatest = false,
        GalleryName = "myGalleryName",
        InVMAccessControlProfileName = "myInVMAccessControlProfileName",
        InVMAccessControlProfileVersionName = "1.0.0",
        Location = "West US",
        Mode = AzureNative.Compute.AccessControlRulesMode.Audit,
        ResourceGroupName = "myResourceGroup",
        Rules = new AzureNative.Compute.Inputs.AccessControlRulesArgs
        {
            Identities = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesIdentityArgs
                {
                    ExePath = "C:\\Windows\\System32\\cscript.exe",
                    GroupName = "Administrators",
                    Name = "WinPA",
                    ProcessName = "cscript",
                    UserName = "SYSTEM",
                },
            },
            Privileges = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesPrivilegeArgs
                {
                    Name = "GoalState",
                    Path = "/machine",
                    QueryParameters = 
                    {
                        { "comp", "goalstate" },
                    },
                },
            },
            RoleAssignments = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesRoleAssignmentArgs
                {
                    Identities = new[]
                    {
                        "WinPA",
                    },
                    Role = "Provisioning",
                },
            },
            Roles = new[]
            {
                new AzureNative.Compute.Inputs.AccessControlRulesRoleArgs
                {
                    Name = "Provisioning",
                    Privileges = new[]
                    {
                        "GoalState",
                    },
                },
            },
        },
        TargetLocations = new[]
        {
            new AzureNative.Compute.Inputs.TargetRegionArgs
            {
                Name = "West US",
            },
            new AzureNative.Compute.Inputs.TargetRegionArgs
            {
                Name = "South Central US",
            },
        },
    });

});

    package main

import (
	compute "github.com/pulumi/pulumi-azure-native-sdk/compute/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := compute.NewGalleryInVMAccessControlProfileVersion(ctx, "galleryInVMAccessControlProfileVersion", &compute.GalleryInVMAccessControlProfileVersionArgs{
			DefaultAccess:                       pulumi.String(compute.EndpointAccessAllow),
			ExcludeFromLatest:                   pulumi.Bool(false),
			GalleryName:                         pulumi.String("myGalleryName"),
			InVMAccessControlProfileName:        pulumi.String("myInVMAccessControlProfileName"),
			InVMAccessControlProfileVersionName: pulumi.String("1.0.0"),
			Location:                            pulumi.String("West US"),
			Mode:                                pulumi.String(compute.AccessControlRulesModeAudit),
			ResourceGroupName:                   pulumi.String("myResourceGroup"),
			Rules: &compute.AccessControlRulesArgs{
				Identities: compute.AccessControlRulesIdentityArray{
					&compute.AccessControlRulesIdentityArgs{
						ExePath:     pulumi.String("C:\\Windows\\System32\\cscript.exe"),
						GroupName:   pulumi.String("Administrators"),
						Name:        pulumi.String("WinPA"),
						ProcessName: pulumi.String("cscript"),
						UserName:    pulumi.String("SYSTEM"),
					},
				},
				Privileges: compute.AccessControlRulesPrivilegeArray{
					&compute.AccessControlRulesPrivilegeArgs{
						Name: pulumi.String("GoalState"),
						Path: pulumi.String("/machine"),
						QueryParameters: pulumi.StringMap{
							"comp": pulumi.String("goalstate"),
						},
					},
				},
				RoleAssignments: compute.AccessControlRulesRoleAssignmentArray{
					&compute.AccessControlRulesRoleAssignmentArgs{
						Identities: pulumi.StringArray{
							pulumi.String("WinPA"),
						},
						Role: pulumi.String("Provisioning"),
					},
				},
				Roles: compute.AccessControlRulesRoleArray{
					&compute.AccessControlRulesRoleArgs{
						Name: pulumi.String("Provisioning"),
						Privileges: pulumi.StringArray{
							pulumi.String("GoalState"),
						},
					},
				},
			},
			TargetLocations: compute.TargetRegionArray{
				&compute.TargetRegionArgs{
					Name: pulumi.String("West US"),
				},
				&compute.TargetRegionArgs{
					Name: pulumi.String("South Central US"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.compute.GalleryInVMAccessControlProfileVersion;
import com.pulumi.azurenative.compute.GalleryInVMAccessControlProfileVersionArgs;
import com.pulumi.azurenative.compute.inputs.AccessControlRulesArgs;
import com.pulumi.azurenative.compute.inputs.TargetRegionArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var galleryInVMAccessControlProfileVersion = new GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", GalleryInVMAccessControlProfileVersionArgs.builder()
            .defaultAccess("Allow")
            .excludeFromLatest(false)
            .galleryName("myGalleryName")
            .inVMAccessControlProfileName("myInVMAccessControlProfileName")
            .inVMAccessControlProfileVersionName("1.0.0")
            .location("West US")
            .mode("Audit")
            .resourceGroupName("myResourceGroup")
            .rules(AccessControlRulesArgs.builder()
                .identities(AccessControlRulesIdentityArgs.builder()
                    .exePath("C:\\Windows\\System32\\cscript.exe")
                    .groupName("Administrators")
                    .name("WinPA")
                    .processName("cscript")
                    .userName("SYSTEM")
                    .build())
                .privileges(AccessControlRulesPrivilegeArgs.builder()
                    .name("GoalState")
                    .path("/machine")
                    .queryParameters(Map.of("comp", "goalstate"))
                    .build())
                .roleAssignments(AccessControlRulesRoleAssignmentArgs.builder()
                    .identities("WinPA")
                    .role("Provisioning")
                    .build())
                .roles(AccessControlRulesRoleArgs.builder()
                    .name("Provisioning")
                    .privileges("GoalState")
                    .build())
                .build())
            .targetLocations(            
                TargetRegionArgs.builder()
                    .name("West US")
                    .build(),
                TargetRegionArgs.builder()
                    .name("South Central US")
                    .build())
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const galleryInVMAccessControlProfileVersion = new azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion", {
    defaultAccess: azure_native.compute.EndpointAccess.Allow,
    excludeFromLatest: false,
    galleryName: "myGalleryName",
    inVMAccessControlProfileName: "myInVMAccessControlProfileName",
    inVMAccessControlProfileVersionName: "1.0.0",
    location: "West US",
    mode: azure_native.compute.AccessControlRulesMode.Audit,
    resourceGroupName: "myResourceGroup",
    rules: {
        identities: [{
            exePath: "C:\\Windows\\System32\\cscript.exe",
            groupName: "Administrators",
            name: "WinPA",
            processName: "cscript",
            userName: "SYSTEM",
        }],
        privileges: [{
            name: "GoalState",
            path: "/machine",
            queryParameters: {
                comp: "goalstate",
            },
        }],
        roleAssignments: [{
            identities: ["WinPA"],
            role: "Provisioning",
        }],
        roles: [{
            name: "Provisioning",
            privileges: ["GoalState"],
        }],
    },
    targetLocations: [
        {
            name: "West US",
        },
        {
            name: "South Central US",
        },
    ],
});

    import pulumi
import pulumi_azure_native as azure_native

gallery_in_vm_access_control_profile_version = azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersion",
    default_access=azure_native.compute.EndpointAccess.ALLOW,
    exclude_from_latest=False,
    gallery_name="myGalleryName",
    in_vm_access_control_profile_name="myInVMAccessControlProfileName",
    in_vm_access_control_profile_version_name="1.0.0",
    location="West US",
    mode=azure_native.compute.AccessControlRulesMode.AUDIT,
    resource_group_name="myResourceGroup",
    rules={
        "identities": [{
            "exe_path": "C:\\Windows\\System32\\cscript.exe",
            "group_name": "Administrators",
            "name": "WinPA",
            "process_name": "cscript",
            "user_name": "SYSTEM",
        }],
        "privileges": [{
            "name": "GoalState",
            "path": "/machine",
            "query_parameters": {
                "comp": "goalstate",
            },
        }],
        "role_assignments": [{
            "identities": ["WinPA"],
            "role": "Provisioning",
        }],
        "roles": [{
            "name": "Provisioning",
            "privileges": ["GoalState"],
        }],
    },
    target_locations=[
        {
            "name": "West US",
        },
        {
            "name": "South Central US",
        },
    ])

    resources:
  galleryInVMAccessControlProfileVersion:
    type: azure-native:compute:GalleryInVMAccessControlProfileVersion
    properties:
      defaultAccess: Allow
      excludeFromLatest: false
      galleryName: myGalleryName
      inVMAccessControlProfileName: myInVMAccessControlProfileName
      inVMAccessControlProfileVersionName: 1.0.0
      location: West US
      mode: Audit
      resourceGroupName: myResourceGroup
      rules:
        identities:
          - exePath: C:\Windows\System32\cscript.exe
            groupName: Administrators
            name: WinPA
            processName: cscript
            userName: SYSTEM
        privileges:
          - name: GoalState
            path: /machine
            queryParameters:
              comp: goalstate
        roleAssignments:
          - identities:
              - WinPA
            role: Provisioning
        roles:
          - name: Provisioning
            privileges:
              - GoalState
      targetLocations:
        - name: West US
        - name: South Central US

    Create GalleryInVMAccessControlProfileVersion Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new GalleryInVMAccessControlProfileVersion(name: string, args: GalleryInVMAccessControlProfileVersionArgs, opts?: CustomResourceOptions);
    @overload
def GalleryInVMAccessControlProfileVersion(resource_name: str,
                                           args: GalleryInVMAccessControlProfileVersionArgs,
                                           opts: Optional[ResourceOptions] = None)

@overload
def GalleryInVMAccessControlProfileVersion(resource_name: str,
                                           opts: Optional[ResourceOptions] = None,
                                           default_access: Optional[Union[str, EndpointAccess]] = None,
                                           gallery_name: Optional[str] = None,
                                           in_vm_access_control_profile_name: Optional[str] = None,
                                           mode: Optional[Union[str, AccessControlRulesMode]] = None,
                                           resource_group_name: Optional[str] = None,
                                           exclude_from_latest: Optional[bool] = None,
                                           in_vm_access_control_profile_version_name: Optional[str] = None,
                                           location: Optional[str] = None,
                                           rules: Optional[AccessControlRulesArgs] = None,
                                           tags: Optional[Mapping[str, str]] = None,
                                           target_locations: Optional[Sequence[TargetRegionArgs]] = None)
    func NewGalleryInVMAccessControlProfileVersion(ctx *Context, name string, args GalleryInVMAccessControlProfileVersionArgs, opts ...ResourceOption) (*GalleryInVMAccessControlProfileVersion, error)
    public GalleryInVMAccessControlProfileVersion(string name, GalleryInVMAccessControlProfileVersionArgs args, CustomResourceOptions? opts = null)
    public GalleryInVMAccessControlProfileVersion(String name, GalleryInVMAccessControlProfileVersionArgs args)
public GalleryInVMAccessControlProfileVersion(String name, GalleryInVMAccessControlProfileVersionArgs args, CustomResourceOptions options)

    type: azure-native:compute:GalleryInVMAccessControlProfileVersion
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args GalleryInVMAccessControlProfileVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args GalleryInVMAccessControlProfileVersionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args GalleryInVMAccessControlProfileVersionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args GalleryInVMAccessControlProfileVersionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args GalleryInVMAccessControlProfileVersionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var galleryInVMAccessControlProfileVersionResource = new AzureNative.Compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", new()
{
    DefaultAccess = "string",
    GalleryName = "string",
    InVMAccessControlProfileName = "string",
    Mode = "string",
    ResourceGroupName = "string",
    ExcludeFromLatest = false,
    InVMAccessControlProfileVersionName = "string",
    Location = "string",
    Rules = new AzureNative.Compute.Inputs.AccessControlRulesArgs
    {
        Identities = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesIdentityArgs
            {
                Name = "string",
                ExePath = "string",
                GroupName = "string",
                ProcessName = "string",
                UserName = "string",
            },
        },
        Privileges = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesPrivilegeArgs
            {
                Name = "string",
                Path = "string",
                QueryParameters = 
                {
                    { "string", "string" },
                },
            },
        },
        RoleAssignments = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesRoleAssignmentArgs
            {
                Identities = new[]
                {
                    "string",
                },
                Role = "string",
            },
        },
        Roles = new[]
        {
            new AzureNative.Compute.Inputs.AccessControlRulesRoleArgs
            {
                Name = "string",
                Privileges = new[]
                {
                    "string",
                },
            },
        },
    },
    Tags = 
    {
        { "string", "string" },
    },
    TargetLocations = new[]
    {
        new AzureNative.Compute.Inputs.TargetRegionArgs
        {
            Name = "string",
            AdditionalReplicaSets = new[]
            {
                new AzureNative.Compute.Inputs.AdditionalReplicaSetArgs
                {
                    RegionalReplicaCount = 0,
                    StorageAccountType = "string",
                },
            },
            Encryption = new AzureNative.Compute.Inputs.EncryptionImagesArgs
            {
                DataDiskImages = new[]
                {
                    new AzureNative.Compute.Inputs.DataDiskImageEncryptionArgs
                    {
                        Lun = 0,
                        DiskEncryptionSetId = "string",
                    },
                },
                OsDiskImage = new AzureNative.Compute.Inputs.OSDiskImageEncryptionArgs
                {
                    DiskEncryptionSetId = "string",
                    SecurityProfile = new AzureNative.Compute.Inputs.OSDiskImageSecurityProfileArgs
                    {
                        ConfidentialVMEncryptionType = "string",
                        SecureVMDiskEncryptionSetId = "string",
                    },
                },
            },
            ExcludeFromLatest = false,
            RegionalReplicaCount = 0,
            StorageAccountType = "string",
        },
    },
});

    example, err := compute.NewGalleryInVMAccessControlProfileVersion(ctx, "galleryInVMAccessControlProfileVersionResource", &compute.GalleryInVMAccessControlProfileVersionArgs{
	DefaultAccess:                       pulumi.String("string"),
	GalleryName:                         pulumi.String("string"),
	InVMAccessControlProfileName:        pulumi.String("string"),
	Mode:                                pulumi.String("string"),
	ResourceGroupName:                   pulumi.String("string"),
	ExcludeFromLatest:                   pulumi.Bool(false),
	InVMAccessControlProfileVersionName: pulumi.String("string"),
	Location:                            pulumi.String("string"),
	Rules: &compute.AccessControlRulesArgs{
		Identities: compute.AccessControlRulesIdentityArray{
			&compute.AccessControlRulesIdentityArgs{
				Name:        pulumi.String("string"),
				ExePath:     pulumi.String("string"),
				GroupName:   pulumi.String("string"),
				ProcessName: pulumi.String("string"),
				UserName:    pulumi.String("string"),
			},
		},
		Privileges: compute.AccessControlRulesPrivilegeArray{
			&compute.AccessControlRulesPrivilegeArgs{
				Name: pulumi.String("string"),
				Path: pulumi.String("string"),
				QueryParameters: pulumi.StringMap{
					"string": pulumi.String("string"),
				},
			},
		},
		RoleAssignments: compute.AccessControlRulesRoleAssignmentArray{
			&compute.AccessControlRulesRoleAssignmentArgs{
				Identities: pulumi.StringArray{
					pulumi.String("string"),
				},
				Role: pulumi.String("string"),
			},
		},
		Roles: compute.AccessControlRulesRoleArray{
			&compute.AccessControlRulesRoleArgs{
				Name: pulumi.String("string"),
				Privileges: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
		},
	},
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TargetLocations: compute.TargetRegionArray{
		&compute.TargetRegionArgs{
			Name: pulumi.String("string"),
			AdditionalReplicaSets: compute.AdditionalReplicaSetArray{
				&compute.AdditionalReplicaSetArgs{
					RegionalReplicaCount: pulumi.Int(0),
					StorageAccountType:   pulumi.String("string"),
				},
			},
			Encryption: &compute.EncryptionImagesArgs{
				DataDiskImages: compute.DataDiskImageEncryptionArray{
					&compute.DataDiskImageEncryptionArgs{
						Lun:                 pulumi.Int(0),
						DiskEncryptionSetId: pulumi.String("string"),
					},
				},
				OsDiskImage: &compute.OSDiskImageEncryptionArgs{
					DiskEncryptionSetId: pulumi.String("string"),
					SecurityProfile: &compute.OSDiskImageSecurityProfileArgs{
						ConfidentialVMEncryptionType: pulumi.String("string"),
						SecureVMDiskEncryptionSetId:  pulumi.String("string"),
					},
				},
			},
			ExcludeFromLatest:    pulumi.Bool(false),
			RegionalReplicaCount: pulumi.Int(0),
			StorageAccountType:   pulumi.String("string"),
		},
	},
})

    var galleryInVMAccessControlProfileVersionResource = new GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", GalleryInVMAccessControlProfileVersionArgs.builder()
    .defaultAccess("string")
    .galleryName("string")
    .inVMAccessControlProfileName("string")
    .mode("string")
    .resourceGroupName("string")
    .excludeFromLatest(false)
    .inVMAccessControlProfileVersionName("string")
    .location("string")
    .rules(AccessControlRulesArgs.builder()
        .identities(AccessControlRulesIdentityArgs.builder()
            .name("string")
            .exePath("string")
            .groupName("string")
            .processName("string")
            .userName("string")
            .build())
        .privileges(AccessControlRulesPrivilegeArgs.builder()
            .name("string")
            .path("string")
            .queryParameters(Map.of("string", "string"))
            .build())
        .roleAssignments(AccessControlRulesRoleAssignmentArgs.builder()
            .identities("string")
            .role("string")
            .build())
        .roles(AccessControlRulesRoleArgs.builder()
            .name("string")
            .privileges("string")
            .build())
        .build())
    .tags(Map.of("string", "string"))
    .targetLocations(TargetRegionArgs.builder()
        .name("string")
        .additionalReplicaSets(AdditionalReplicaSetArgs.builder()
            .regionalReplicaCount(0)
            .storageAccountType("string")
            .build())
        .encryption(EncryptionImagesArgs.builder()
            .dataDiskImages(DataDiskImageEncryptionArgs.builder()
                .lun(0)
                .diskEncryptionSetId("string")
                .build())
            .osDiskImage(OSDiskImageEncryptionArgs.builder()
                .diskEncryptionSetId("string")
                .securityProfile(OSDiskImageSecurityProfileArgs.builder()
                    .confidentialVMEncryptionType("string")
                    .secureVMDiskEncryptionSetId("string")
                    .build())
                .build())
            .build())
        .excludeFromLatest(false)
        .regionalReplicaCount(0)
        .storageAccountType("string")
        .build())
    .build());

    gallery_in_vm_access_control_profile_version_resource = azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource",
    default_access="string",
    gallery_name="string",
    in_vm_access_control_profile_name="string",
    mode="string",
    resource_group_name="string",
    exclude_from_latest=False,
    in_vm_access_control_profile_version_name="string",
    location="string",
    rules={
        "identities": [{
            "name": "string",
            "exe_path": "string",
            "group_name": "string",
            "process_name": "string",
            "user_name": "string",
        }],
        "privileges": [{
            "name": "string",
            "path": "string",
            "query_parameters": {
                "string": "string",
            },
        }],
        "role_assignments": [{
            "identities": ["string"],
            "role": "string",
        }],
        "roles": [{
            "name": "string",
            "privileges": ["string"],
        }],
    },
    tags={
        "string": "string",
    },
    target_locations=[{
        "name": "string",
        "additional_replica_sets": [{
            "regional_replica_count": 0,
            "storage_account_type": "string",
        }],
        "encryption": {
            "data_disk_images": [{
                "lun": 0,
                "disk_encryption_set_id": "string",
            }],
            "os_disk_image": {
                "disk_encryption_set_id": "string",
                "security_profile": {
                    "confidential_vm_encryption_type": "string",
                    "secure_vm_disk_encryption_set_id": "string",
                },
            },
        },
        "exclude_from_latest": False,
        "regional_replica_count": 0,
        "storage_account_type": "string",
    }])

    const galleryInVMAccessControlProfileVersionResource = new azure_native.compute.GalleryInVMAccessControlProfileVersion("galleryInVMAccessControlProfileVersionResource", {
    defaultAccess: "string",
    galleryName: "string",
    inVMAccessControlProfileName: "string",
    mode: "string",
    resourceGroupName: "string",
    excludeFromLatest: false,
    inVMAccessControlProfileVersionName: "string",
    location: "string",
    rules: {
        identities: [{
            name: "string",
            exePath: "string",
            groupName: "string",
            processName: "string",
            userName: "string",
        }],
        privileges: [{
            name: "string",
            path: "string",
            queryParameters: {
                string: "string",
            },
        }],
        roleAssignments: [{
            identities: ["string"],
            role: "string",
        }],
        roles: [{
            name: "string",
            privileges: ["string"],
        }],
    },
    tags: {
        string: "string",
    },
    targetLocations: [{
        name: "string",
        additionalReplicaSets: [{
            regionalReplicaCount: 0,
            storageAccountType: "string",
        }],
        encryption: {
            dataDiskImages: [{
                lun: 0,
                diskEncryptionSetId: "string",
            }],
            osDiskImage: {
                diskEncryptionSetId: "string",
                securityProfile: {
                    confidentialVMEncryptionType: "string",
                    secureVMDiskEncryptionSetId: "string",
                },
            },
        },
        excludeFromLatest: false,
        regionalReplicaCount: 0,
        storageAccountType: "string",
    }],
});

    type: azure-native:compute:GalleryInVMAccessControlProfileVersion
properties:
    defaultAccess: string
    excludeFromLatest: false
    galleryName: string
    inVMAccessControlProfileName: string
    inVMAccessControlProfileVersionName: string
    location: string
    mode: string
    resourceGroupName: string
    rules:
        identities:
            - exePath: string
              groupName: string
              name: string
              processName: string
              userName: string
        privileges:
            - name: string
              path: string
              queryParameters:
                string: string
        roleAssignments:
            - identities:
                - string
              role: string
        roles:
            - name: string
              privileges:
                - string
    tags:
        string: string
    targetLocations:
        - additionalReplicaSets:
            - regionalReplicaCount: 0
              storageAccountType: string
          encryption:
            dataDiskImages:
                - diskEncryptionSetId: string
                  lun: 0
            osDiskImage:
                diskEncryptionSetId: string
                securityProfile:
                    confidentialVMEncryptionType: string
                    secureVMDiskEncryptionSetId: string
          excludeFromLatest: false
          name: string
          regionalReplicaCount: 0
          storageAccountType: string

    GalleryInVMAccessControlProfileVersion Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The GalleryInVMAccessControlProfileVersion resource accepts the following input properties:

    DefaultAccess string | Pulumi.AzureNative.Compute.EndpointAccess
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    GalleryName string
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    InVMAccessControlProfileName string
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    Mode string | Pulumi.AzureNative.Compute.AccessControlRulesMode
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    ResourceGroupName string
    The name of the resource group.
    ExcludeFromLatest bool
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    InVMAccessControlProfileVersionName string
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    Location string
    Resource location
    Rules Pulumi.AzureNative.Compute.Inputs.AccessControlRules
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    Tags Dictionary<string, string>
    Resource tags
    TargetLocations List<Pulumi.AzureNative.Compute.Inputs.TargetRegion>
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
    DefaultAccess string | EndpointAccess
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    GalleryName string
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    InVMAccessControlProfileName string
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    Mode string | AccessControlRulesMode
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    ResourceGroupName string
    The name of the resource group.
    ExcludeFromLatest bool
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    InVMAccessControlProfileVersionName string
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    Location string
    Resource location
    Rules AccessControlRulesArgs
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    Tags map[string]string
    Resource tags
    TargetLocations []TargetRegionArgs
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
    defaultAccess String | EndpointAccess
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    galleryName String
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    inVMAccessControlProfileName String
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    mode String | AccessControlRulesMode
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    resourceGroupName String
    The name of the resource group.
    excludeFromLatest Boolean
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    inVMAccessControlProfileVersionName String
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    location String
    Resource location
    rules AccessControlRules
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    tags Map<String,String>
    Resource tags
    targetLocations List<TargetRegion>
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
    defaultAccess string | EndpointAccess
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    galleryName string
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    inVMAccessControlProfileName string
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    mode string | AccessControlRulesMode
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    resourceGroupName string
    The name of the resource group.
    excludeFromLatest boolean
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    inVMAccessControlProfileVersionName string
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    location string
    Resource location
    rules AccessControlRules
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    tags {[key: string]: string}
    Resource tags
    targetLocations TargetRegion[]
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
    default_access str | EndpointAccess
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    gallery_name str
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    in_vm_access_control_profile_name str
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    mode str | AccessControlRulesMode
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    resource_group_name str
    The name of the resource group.
    exclude_from_latest bool
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    in_vm_access_control_profile_version_name str
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    location str
    Resource location
    rules AccessControlRulesArgs
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    tags Mapping[str, str]
    Resource tags
    target_locations Sequence[TargetRegionArgs]
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.
    defaultAccess String | "Allow" | "Deny"
    This property allows you to specify if the requests will be allowed to access the host endpoints. Possible values are: 'Allow', 'Deny'.
    galleryName String
    The name of the Shared Image Gallery in which the inVMAccessControlProfile resides.
    inVMAccessControlProfileName String
    The name of the gallery inVMAccessControlProfile in which the inVMAccessControlProfile version is to be created.
    mode String | "Audit" | "Enforce" | "Disabled"
    This property allows you to specify whether the access control rules are in Audit mode, in Enforce mode or Disabled. Possible values are: 'Audit', 'Enforce' or 'Disabled'.
    resourceGroupName String
    The name of the resource group.
    excludeFromLatest Boolean
    If set to true, Virtual Machines deployed from the latest version of the Resource Profile won't use this Profile version.
    inVMAccessControlProfileVersionName String
    The name of the gallery inVMAccessControlProfile version to be created. Needs to follow semantic version name pattern: The allowed characters are digit and period. Digits must be within the range of a 32-bit integer. Format: ..
    location String
    Resource location
    rules Property Map
    This is the Access Control Rules specification for an inVMAccessControlProfile version.
    tags Map<String>
    Resource tags
    targetLocations List<Property Map>
    The target regions where the Resource Profile version is going to be replicated to. This property is updatable.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the GalleryInVMAccessControlProfileVersion resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name
    ProvisioningState string
    The provisioning state, which only appears in the response.
    PublishedDate string
    The timestamp for when the Resource Profile Version is published.
    ReplicationStatus Pulumi.AzureNative.Compute.Outputs.ReplicationStatusResponse
    This is the replication status of the gallery image version.
    Type string
    Resource type
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    Resource name
    ProvisioningState string
    The provisioning state, which only appears in the response.
    PublishedDate string
    The timestamp for when the Resource Profile Version is published.
    ReplicationStatus ReplicationStatusResponse
    This is the replication status of the gallery image version.
    Type string
    Resource type
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name
    provisioningState String
    The provisioning state, which only appears in the response.
    publishedDate String
    The timestamp for when the Resource Profile Version is published.
    replicationStatus ReplicationStatusResponse
    This is the replication status of the gallery image version.
    type String
    Resource type
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    Resource name
    provisioningState string
    The provisioning state, which only appears in the response.
    publishedDate string
    The timestamp for when the Resource Profile Version is published.
    replicationStatus ReplicationStatusResponse
    This is the replication status of the gallery image version.
    type string
    Resource type
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    Resource name
    provisioning_state str
    The provisioning state, which only appears in the response.
    published_date str
    The timestamp for when the Resource Profile Version is published.
    replication_status ReplicationStatusResponse
    This is the replication status of the gallery image version.
    type str
    Resource type
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    Resource name
    provisioningState String
    The provisioning state, which only appears in the response.
    publishedDate String
    The timestamp for when the Resource Profile Version is published.
    replicationStatus Property Map
    This is the replication status of the gallery image version.
    type String
    Resource type

    Supporting Types

    AccessControlRules, AccessControlRulesArgs

    identities List<Property Map>
    A list of identities.
    privileges List<Property Map>
    A list of privileges.
    roleAssignments List<Property Map>
    A list of role assignments.
    roles List<Property Map>
    A list of roles.

    AccessControlRulesIdentity, AccessControlRulesIdentityArgs

    Name string
    The name of the identity.
    ExePath string
    The path to the executable.
    GroupName string
    The groupName corresponding to this identity.
    ProcessName string
    The process name of the executable.
    UserName string
    The username corresponding to this identity.
    Name string
    The name of the identity.
    ExePath string
    The path to the executable.
    GroupName string
    The groupName corresponding to this identity.
    ProcessName string
    The process name of the executable.
    UserName string
    The username corresponding to this identity.
    name String
    The name of the identity.
    exePath String
    The path to the executable.
    groupName String
    The groupName corresponding to this identity.
    processName String
    The process name of the executable.
    userName String
    The username corresponding to this identity.
    name string
    The name of the identity.
    exePath string
    The path to the executable.
    groupName string
    The groupName corresponding to this identity.
    processName string
    The process name of the executable.
    userName string
    The username corresponding to this identity.
    name str
    The name of the identity.
    exe_path str
    The path to the executable.
    group_name str
    The groupName corresponding to this identity.
    process_name str
    The process name of the executable.
    user_name str
    The username corresponding to this identity.
    name String
    The name of the identity.
    exePath String
    The path to the executable.
    groupName String
    The groupName corresponding to this identity.
    processName String
    The process name of the executable.
    userName String
    The username corresponding to this identity.

    AccessControlRulesIdentityResponse, AccessControlRulesIdentityResponseArgs

    Name string
    The name of the identity.
    ExePath string
    The path to the executable.
    GroupName string
    The groupName corresponding to this identity.
    ProcessName string
    The process name of the executable.
    UserName string
    The username corresponding to this identity.
    Name string
    The name of the identity.
    ExePath string
    The path to the executable.
    GroupName string
    The groupName corresponding to this identity.
    ProcessName string
    The process name of the executable.
    UserName string
    The username corresponding to this identity.
    name String
    The name of the identity.
    exePath String
    The path to the executable.
    groupName String
    The groupName corresponding to this identity.
    processName String
    The process name of the executable.
    userName String
    The username corresponding to this identity.
    name string
    The name of the identity.
    exePath string
    The path to the executable.
    groupName string
    The groupName corresponding to this identity.
    processName string
    The process name of the executable.
    userName string
    The username corresponding to this identity.
    name str
    The name of the identity.
    exe_path str
    The path to the executable.
    group_name str
    The groupName corresponding to this identity.
    process_name str
    The process name of the executable.
    user_name str
    The username corresponding to this identity.
    name String
    The name of the identity.
    exePath String
    The path to the executable.
    groupName String
    The groupName corresponding to this identity.
    processName String
    The process name of the executable.
    userName String
    The username corresponding to this identity.

    AccessControlRulesMode, AccessControlRulesModeArgs

    Audit
    Audit
    Enforce
    Enforce
    Disabled
    Disabled
    AccessControlRulesModeAudit
    Audit
    AccessControlRulesModeEnforce
    Enforce
    AccessControlRulesModeDisabled
    Disabled
    Audit
    Audit
    Enforce
    Enforce
    Disabled
    Disabled
    Audit
    Audit
    Enforce
    Enforce
    Disabled
    Disabled
    AUDIT
    Audit
    ENFORCE
    Enforce
    DISABLED
    Disabled
    "Audit"
    Audit
    "Enforce"
    Enforce
    "Disabled"
    Disabled

    AccessControlRulesPrivilege, AccessControlRulesPrivilegeArgs

    Name string
    The name of the privilege.
    Path string
    The HTTP path corresponding to the privilege.
    QueryParameters Dictionary<string, string>
    The query parameters to match in the path.
    Name string
    The name of the privilege.
    Path string
    The HTTP path corresponding to the privilege.
    QueryParameters map[string]string
    The query parameters to match in the path.
    name String
    The name of the privilege.
    path String
    The HTTP path corresponding to the privilege.
    queryParameters Map<String,String>
    The query parameters to match in the path.
    name string
    The name of the privilege.
    path string
    The HTTP path corresponding to the privilege.
    queryParameters {[key: string]: string}
    The query parameters to match in the path.
    name str
    The name of the privilege.
    path str
    The HTTP path corresponding to the privilege.
    query_parameters Mapping[str, str]
    The query parameters to match in the path.
    name String
    The name of the privilege.
    path String
    The HTTP path corresponding to the privilege.
    queryParameters Map<String>
    The query parameters to match in the path.

    AccessControlRulesPrivilegeResponse, AccessControlRulesPrivilegeResponseArgs

    Name string
    The name of the privilege.
    Path string
    The HTTP path corresponding to the privilege.
    QueryParameters Dictionary<string, string>
    The query parameters to match in the path.
    Name string
    The name of the privilege.
    Path string
    The HTTP path corresponding to the privilege.
    QueryParameters map[string]string
    The query parameters to match in the path.
    name String
    The name of the privilege.
    path String
    The HTTP path corresponding to the privilege.
    queryParameters Map<String,String>
    The query parameters to match in the path.
    name string
    The name of the privilege.
    path string
    The HTTP path corresponding to the privilege.
    queryParameters {[key: string]: string}
    The query parameters to match in the path.
    name str
    The name of the privilege.
    path str
    The HTTP path corresponding to the privilege.
    query_parameters Mapping[str, str]
    The query parameters to match in the path.
    name String
    The name of the privilege.
    path String
    The HTTP path corresponding to the privilege.
    queryParameters Map<String>
    The query parameters to match in the path.

    AccessControlRulesResponse, AccessControlRulesResponseArgs

    identities List<Property Map>
    A list of identities.
    privileges List<Property Map>
    A list of privileges.
    roleAssignments List<Property Map>
    A list of role assignments.
    roles List<Property Map>
    A list of roles.

    AccessControlRulesRole, AccessControlRulesRoleArgs

    Name string
    The name of the role.
    Privileges List<string>
    A list of privileges needed by this role.
    Name string
    The name of the role.
    Privileges []string
    A list of privileges needed by this role.
    name String
    The name of the role.
    privileges List<String>
    A list of privileges needed by this role.
    name string
    The name of the role.
    privileges string[]
    A list of privileges needed by this role.
    name str
    The name of the role.
    privileges Sequence[str]
    A list of privileges needed by this role.
    name String
    The name of the role.
    privileges List<String>
    A list of privileges needed by this role.

    AccessControlRulesRoleAssignment, AccessControlRulesRoleAssignmentArgs

    Identities List<string>
    A list of identities that can access the privileges defined by the role.
    Role string
    The name of the role.
    Identities []string
    A list of identities that can access the privileges defined by the role.
    Role string
    The name of the role.
    identities List<String>
    A list of identities that can access the privileges defined by the role.
    role String
    The name of the role.
    identities string[]
    A list of identities that can access the privileges defined by the role.
    role string
    The name of the role.
    identities Sequence[str]
    A list of identities that can access the privileges defined by the role.
    role str
    The name of the role.
    identities List<String>
    A list of identities that can access the privileges defined by the role.
    role String
    The name of the role.

    AccessControlRulesRoleAssignmentResponse, AccessControlRulesRoleAssignmentResponseArgs

    Identities List<string>
    A list of identities that can access the privileges defined by the role.
    Role string
    The name of the role.
    Identities []string
    A list of identities that can access the privileges defined by the role.
    Role string
    The name of the role.
    identities List<String>
    A list of identities that can access the privileges defined by the role.
    role String
    The name of the role.
    identities string[]
    A list of identities that can access the privileges defined by the role.
    role string
    The name of the role.
    identities Sequence[str]
    A list of identities that can access the privileges defined by the role.
    role str
    The name of the role.
    identities List<String>
    A list of identities that can access the privileges defined by the role.
    role String
    The name of the role.

    AccessControlRulesRoleResponse, AccessControlRulesRoleResponseArgs

    Name string
    The name of the role.
    Privileges List<string>
    A list of privileges needed by this role.
    Name string
    The name of the role.
    Privileges []string
    A list of privileges needed by this role.
    name String
    The name of the role.
    privileges List<String>
    A list of privileges needed by this role.
    name string
    The name of the role.
    privileges string[]
    A list of privileges needed by this role.
    name str
    The name of the role.
    privileges Sequence[str]
    A list of privileges needed by this role.
    name String
    The name of the role.
    privileges List<String>
    A list of privileges needed by this role.

    AdditionalReplicaSet, AdditionalReplicaSetArgs

    RegionalReplicaCount int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    StorageAccountType string | Pulumi.AzureNative.Compute.StorageAccountType
    Specifies the storage account type to be used to create the direct drive replicas
    RegionalReplicaCount int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    StorageAccountType string | StorageAccountType
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount Integer
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType String | StorageAccountType
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount number
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType string | StorageAccountType
    Specifies the storage account type to be used to create the direct drive replicas
    regional_replica_count int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storage_account_type str | StorageAccountType
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount Number
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType String | "Standard_LRS" | "Standard_ZRS" | "Premium_LRS" | "PremiumV2_LRS"
    Specifies the storage account type to be used to create the direct drive replicas

    AdditionalReplicaSetResponse, AdditionalReplicaSetResponseArgs

    RegionalReplicaCount int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    StorageAccountType string
    Specifies the storage account type to be used to create the direct drive replicas
    RegionalReplicaCount int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    StorageAccountType string
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount Integer
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType String
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount number
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType string
    Specifies the storage account type to be used to create the direct drive replicas
    regional_replica_count int
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storage_account_type str
    Specifies the storage account type to be used to create the direct drive replicas
    regionalReplicaCount Number
    The number of direct drive replicas of the Image Version to be created.This Property is updatable
    storageAccountType String
    Specifies the storage account type to be used to create the direct drive replicas

    ConfidentialVMEncryptionType, ConfidentialVMEncryptionTypeArgs

    EncryptedVMGuestStateOnlyWithPmk
    EncryptedVMGuestStateOnlyWithPmk
    EncryptedWithPmk
    EncryptedWithPmk
    EncryptedWithCmk
    EncryptedWithCmk
    NonPersistedTPM
    NonPersistedTPM
    ConfidentialVMEncryptionTypeEncryptedVMGuestStateOnlyWithPmk
    EncryptedVMGuestStateOnlyWithPmk
    ConfidentialVMEncryptionTypeEncryptedWithPmk
    EncryptedWithPmk
    ConfidentialVMEncryptionTypeEncryptedWithCmk
    EncryptedWithCmk
    ConfidentialVMEncryptionTypeNonPersistedTPM
    NonPersistedTPM
    EncryptedVMGuestStateOnlyWithPmk
    EncryptedVMGuestStateOnlyWithPmk
    EncryptedWithPmk
    EncryptedWithPmk
    EncryptedWithCmk
    EncryptedWithCmk
    NonPersistedTPM
    NonPersistedTPM
    EncryptedVMGuestStateOnlyWithPmk
    EncryptedVMGuestStateOnlyWithPmk
    EncryptedWithPmk
    EncryptedWithPmk
    EncryptedWithCmk
    EncryptedWithCmk
    NonPersistedTPM
    NonPersistedTPM
    ENCRYPTED_VM_GUEST_STATE_ONLY_WITH_PMK
    EncryptedVMGuestStateOnlyWithPmk
    ENCRYPTED_WITH_PMK
    EncryptedWithPmk
    ENCRYPTED_WITH_CMK
    EncryptedWithCmk
    NON_PERSISTED_TPM
    NonPersistedTPM
    "EncryptedVMGuestStateOnlyWithPmk"
    EncryptedVMGuestStateOnlyWithPmk
    "EncryptedWithPmk"
    EncryptedWithPmk
    "EncryptedWithCmk"
    EncryptedWithCmk
    "NonPersistedTPM"
    NonPersistedTPM

    DataDiskImageEncryption, DataDiskImageEncryptionArgs

    Lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    Lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    lun Integer
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    lun number
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    disk_encryption_set_id str
    A relative URI containing the resource ID of the disk encryption set.
    lun Number
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.

    DataDiskImageEncryptionResponse, DataDiskImageEncryptionResponseArgs

    Lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    Lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    lun Integer
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    lun number
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    lun int
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    disk_encryption_set_id str
    A relative URI containing the resource ID of the disk encryption set.
    lun Number
    This property specifies the logical unit number of the data disk. This value is used to identify data disks within the Virtual Machine and therefore must be unique for each data disk attached to the Virtual Machine.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.

    EncryptionImages, EncryptionImagesArgs

    DataDiskImages List<Pulumi.AzureNative.Compute.Inputs.DataDiskImageEncryption>
    A list of encryption specifications for data disk images.
    OsDiskImage Pulumi.AzureNative.Compute.Inputs.OSDiskImageEncryption
    Contains encryption settings for an OS disk image.
    DataDiskImages []DataDiskImageEncryption
    A list of encryption specifications for data disk images.
    OsDiskImage OSDiskImageEncryption
    Contains encryption settings for an OS disk image.
    dataDiskImages List<DataDiskImageEncryption>
    A list of encryption specifications for data disk images.
    osDiskImage OSDiskImageEncryption
    Contains encryption settings for an OS disk image.
    dataDiskImages DataDiskImageEncryption[]
    A list of encryption specifications for data disk images.
    osDiskImage OSDiskImageEncryption
    Contains encryption settings for an OS disk image.
    data_disk_images Sequence[DataDiskImageEncryption]
    A list of encryption specifications for data disk images.
    os_disk_image OSDiskImageEncryption
    Contains encryption settings for an OS disk image.
    dataDiskImages List<Property Map>
    A list of encryption specifications for data disk images.
    osDiskImage Property Map
    Contains encryption settings for an OS disk image.

    EncryptionImagesResponse, EncryptionImagesResponseArgs

    DataDiskImages List<Pulumi.AzureNative.Compute.Inputs.DataDiskImageEncryptionResponse>
    A list of encryption specifications for data disk images.
    OsDiskImage Pulumi.AzureNative.Compute.Inputs.OSDiskImageEncryptionResponse
    Contains encryption settings for an OS disk image.
    DataDiskImages []DataDiskImageEncryptionResponse
    A list of encryption specifications for data disk images.
    OsDiskImage OSDiskImageEncryptionResponse
    Contains encryption settings for an OS disk image.
    dataDiskImages List<DataDiskImageEncryptionResponse>
    A list of encryption specifications for data disk images.
    osDiskImage OSDiskImageEncryptionResponse
    Contains encryption settings for an OS disk image.
    dataDiskImages DataDiskImageEncryptionResponse[]
    A list of encryption specifications for data disk images.
    osDiskImage OSDiskImageEncryptionResponse
    Contains encryption settings for an OS disk image.
    data_disk_images Sequence[DataDiskImageEncryptionResponse]
    A list of encryption specifications for data disk images.
    os_disk_image OSDiskImageEncryptionResponse
    Contains encryption settings for an OS disk image.
    dataDiskImages List<Property Map>
    A list of encryption specifications for data disk images.
    osDiskImage Property Map
    Contains encryption settings for an OS disk image.

    EndpointAccess, EndpointAccessArgs

    Allow
    Allow
    Deny
    Deny
    EndpointAccessAllow
    Allow
    EndpointAccessDeny
    Deny
    Allow
    Allow
    Deny
    Deny
    Allow
    Allow
    Deny
    Deny
    ALLOW
    Allow
    DENY
    Deny
    "Allow"
    Allow
    "Deny"
    Deny

    OSDiskImageEncryption, OSDiskImageEncryptionArgs

    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    SecurityProfile Pulumi.AzureNative.Compute.Inputs.OSDiskImageSecurityProfile
    This property specifies the security profile of an OS disk image.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    SecurityProfile OSDiskImageSecurityProfile
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile OSDiskImageSecurityProfile
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile OSDiskImageSecurityProfile
    This property specifies the security profile of an OS disk image.
    disk_encryption_set_id str
    A relative URI containing the resource ID of the disk encryption set.
    security_profile OSDiskImageSecurityProfile
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile Property Map
    This property specifies the security profile of an OS disk image.

    OSDiskImageEncryptionResponse, OSDiskImageEncryptionResponseArgs

    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    SecurityProfile Pulumi.AzureNative.Compute.Inputs.OSDiskImageSecurityProfileResponse
    This property specifies the security profile of an OS disk image.
    DiskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    SecurityProfile OSDiskImageSecurityProfileResponse
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile OSDiskImageSecurityProfileResponse
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId string
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile OSDiskImageSecurityProfileResponse
    This property specifies the security profile of an OS disk image.
    disk_encryption_set_id str
    A relative URI containing the resource ID of the disk encryption set.
    security_profile OSDiskImageSecurityProfileResponse
    This property specifies the security profile of an OS disk image.
    diskEncryptionSetId String
    A relative URI containing the resource ID of the disk encryption set.
    securityProfile Property Map
    This property specifies the security profile of an OS disk image.

    OSDiskImageSecurityProfile, OSDiskImageSecurityProfileArgs

    ConfidentialVMEncryptionType string | Pulumi.AzureNative.Compute.ConfidentialVMEncryptionType
    confidential VM encryption types
    SecureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    ConfidentialVMEncryptionType string | ConfidentialVMEncryptionType
    confidential VM encryption types
    SecureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    confidentialVMEncryptionType String | ConfidentialVMEncryptionType
    confidential VM encryption types
    secureVMDiskEncryptionSetId String
    secure VM disk encryption set id
    confidentialVMEncryptionType string | ConfidentialVMEncryptionType
    confidential VM encryption types
    secureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    confidential_vm_encryption_type str | ConfidentialVMEncryptionType
    confidential VM encryption types
    secure_vm_disk_encryption_set_id str
    secure VM disk encryption set id

    OSDiskImageSecurityProfileResponse, OSDiskImageSecurityProfileResponseArgs

    ConfidentialVMEncryptionType string
    confidential VM encryption types
    SecureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    ConfidentialVMEncryptionType string
    confidential VM encryption types
    SecureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    confidentialVMEncryptionType String
    confidential VM encryption types
    secureVMDiskEncryptionSetId String
    secure VM disk encryption set id
    confidentialVMEncryptionType string
    confidential VM encryption types
    secureVMDiskEncryptionSetId string
    secure VM disk encryption set id
    confidential_vm_encryption_type str
    confidential VM encryption types
    secure_vm_disk_encryption_set_id str
    secure VM disk encryption set id
    confidentialVMEncryptionType String
    confidential VM encryption types
    secureVMDiskEncryptionSetId String
    secure VM disk encryption set id

    RegionalReplicationStatusResponse, RegionalReplicationStatusResponseArgs

    Details string
    The details of the replication status.
    Progress int
    It indicates progress of the replication job.
    Region string
    The region to which the gallery image version is being replicated to.
    State string
    This is the regional replication state.
    Details string
    The details of the replication status.
    Progress int
    It indicates progress of the replication job.
    Region string
    The region to which the gallery image version is being replicated to.
    State string
    This is the regional replication state.
    details String
    The details of the replication status.
    progress Integer
    It indicates progress of the replication job.
    region String
    The region to which the gallery image version is being replicated to.
    state String
    This is the regional replication state.
    details string
    The details of the replication status.
    progress number
    It indicates progress of the replication job.
    region string
    The region to which the gallery image version is being replicated to.
    state string
    This is the regional replication state.
    details str
    The details of the replication status.
    progress int
    It indicates progress of the replication job.
    region str
    The region to which the gallery image version is being replicated to.
    state str
    This is the regional replication state.
    details String
    The details of the replication status.
    progress Number
    It indicates progress of the replication job.
    region String
    The region to which the gallery image version is being replicated to.
    state String
    This is the regional replication state.

    ReplicationStatusResponse, ReplicationStatusResponseArgs

    AggregatedState string
    This is the aggregated replication status based on all the regional replication status flags.
    Summary List<Pulumi.AzureNative.Compute.Inputs.RegionalReplicationStatusResponse>
    This is a summary of replication status for each region.
    AggregatedState string
    This is the aggregated replication status based on all the regional replication status flags.
    Summary []RegionalReplicationStatusResponse
    This is a summary of replication status for each region.
    aggregatedState String
    This is the aggregated replication status based on all the regional replication status flags.
    summary List<RegionalReplicationStatusResponse>
    This is a summary of replication status for each region.
    aggregatedState string
    This is the aggregated replication status based on all the regional replication status flags.
    summary RegionalReplicationStatusResponse[]
    This is a summary of replication status for each region.
    aggregated_state str
    This is the aggregated replication status based on all the regional replication status flags.
    summary Sequence[RegionalReplicationStatusResponse]
    This is a summary of replication status for each region.
    aggregatedState String
    This is the aggregated replication status based on all the regional replication status flags.
    summary List<Property Map>
    This is a summary of replication status for each region.

    StorageAccountType, StorageAccountTypeArgs

    Standard_LRS
    Standard_LRS
    Standard_ZRS
    Standard_ZRS
    Premium_LRS
    Premium_LRS
    PremiumV2_LRS
    PremiumV2_LRS
    StorageAccountType_Standard_LRS
    Standard_LRS
    StorageAccountType_Standard_ZRS
    Standard_ZRS
    StorageAccountType_Premium_LRS
    Premium_LRS
    StorageAccountType_PremiumV2_LRS
    PremiumV2_LRS
    Standard_LRS
    Standard_LRS
    Standard_ZRS
    Standard_ZRS
    Premium_LRS
    Premium_LRS
    PremiumV2_LRS
    PremiumV2_LRS
    Standard_LRS
    Standard_LRS
    Standard_ZRS
    Standard_ZRS
    Premium_LRS
    Premium_LRS
    PremiumV2_LRS
    PremiumV2_LRS
    STANDARD_LRS
    Standard_LRS
    STANDARD_ZRS
    Standard_ZRS
    PREMIUM_LRS
    Premium_LRS
    PREMIUM_V2_LRS
    PremiumV2_LRS
    "Standard_LRS"
    Standard_LRS
    "Standard_ZRS"
    Standard_ZRS
    "Premium_LRS"
    Premium_LRS
    "PremiumV2_LRS"
    PremiumV2_LRS

    TargetRegion, TargetRegionArgs

    Name string
    The name of the region.
    AdditionalReplicaSets List<Pulumi.AzureNative.Compute.Inputs.AdditionalReplicaSet>
    List of storage sku with replica count to create direct drive replicas.
    Encryption Pulumi.AzureNative.Compute.Inputs.EncryptionImages
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    ExcludeFromLatest bool
    Contains the flag setting to hide an image when users specify version='latest'
    RegionalReplicaCount int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    StorageAccountType string | Pulumi.AzureNative.Compute.StorageAccountType
    Specifies the storage account type to be used to store the image. This property is not updatable.
    Name string
    The name of the region.
    AdditionalReplicaSets []AdditionalReplicaSet
    List of storage sku with replica count to create direct drive replicas.
    Encryption EncryptionImages
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    ExcludeFromLatest bool
    Contains the flag setting to hide an image when users specify version='latest'
    RegionalReplicaCount int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    StorageAccountType string | StorageAccountType
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name String
    The name of the region.
    additionalReplicaSets List<AdditionalReplicaSet>
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImages
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest Boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount Integer
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType String | StorageAccountType
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name string
    The name of the region.
    additionalReplicaSets AdditionalReplicaSet[]
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImages
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount number
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType string | StorageAccountType
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name str
    The name of the region.
    additional_replica_sets Sequence[AdditionalReplicaSet]
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImages
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    exclude_from_latest bool
    Contains the flag setting to hide an image when users specify version='latest'
    regional_replica_count int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storage_account_type str | StorageAccountType
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name String
    The name of the region.
    additionalReplicaSets List<Property Map>
    List of storage sku with replica count to create direct drive replicas.
    encryption Property Map
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest Boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount Number
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType String | "Standard_LRS" | "Standard_ZRS" | "Premium_LRS" | "PremiumV2_LRS"
    Specifies the storage account type to be used to store the image. This property is not updatable.

    TargetRegionResponse, TargetRegionResponseArgs

    Name string
    The name of the region.
    AdditionalReplicaSets List<Pulumi.AzureNative.Compute.Inputs.AdditionalReplicaSetResponse>
    List of storage sku with replica count to create direct drive replicas.
    Encryption Pulumi.AzureNative.Compute.Inputs.EncryptionImagesResponse
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    ExcludeFromLatest bool
    Contains the flag setting to hide an image when users specify version='latest'
    RegionalReplicaCount int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    StorageAccountType string
    Specifies the storage account type to be used to store the image. This property is not updatable.
    Name string
    The name of the region.
    AdditionalReplicaSets []AdditionalReplicaSetResponse
    List of storage sku with replica count to create direct drive replicas.
    Encryption EncryptionImagesResponse
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    ExcludeFromLatest bool
    Contains the flag setting to hide an image when users specify version='latest'
    RegionalReplicaCount int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    StorageAccountType string
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name String
    The name of the region.
    additionalReplicaSets List<AdditionalReplicaSetResponse>
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImagesResponse
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest Boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount Integer
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType String
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name string
    The name of the region.
    additionalReplicaSets AdditionalReplicaSetResponse[]
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImagesResponse
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount number
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType string
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name str
    The name of the region.
    additional_replica_sets Sequence[AdditionalReplicaSetResponse]
    List of storage sku with replica count to create direct drive replicas.
    encryption EncryptionImagesResponse
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    exclude_from_latest bool
    Contains the flag setting to hide an image when users specify version='latest'
    regional_replica_count int
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storage_account_type str
    Specifies the storage account type to be used to store the image. This property is not updatable.
    name String
    The name of the region.
    additionalReplicaSets List<Property Map>
    List of storage sku with replica count to create direct drive replicas.
    encryption Property Map
    Optional. Allows users to provide customer managed keys for encrypting the OS and data disks in the gallery artifact.
    excludeFromLatest Boolean
    Contains the flag setting to hide an image when users specify version='latest'
    regionalReplicaCount Number
    The number of replicas of the Image Version to be created per region. This property is updatable.
    storageAccountType String
    Specifies the storage account type to be used to store the image. This property is not updatable.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:compute:GalleryInVMAccessControlProfileVersion 1.0.0 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Compute/galleries/{galleryName}/inVMAccessControlProfiles/{inVMAccessControlProfileName}/versions/{inVMAccessControlProfileVersionName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
    pulumi/pulumi-azure-native