Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. Azure Native
  3. API Docs
  4. sovereign
  5. LandingZoneConfigurationOperation
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

azure-native.sovereign.LandingZoneConfigurationOperation

Explore with Pulumi AI

azure-native logo
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
pulumi/pulumi-azure-native

    Concrete proxy resource types can be created by aliasing this type using a specific property type. Azure REST API version: 2025-02-27-preview.

    Example Usage

    LandingZoneConfigurationOperations_Create

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var landingZoneConfigurationOperation = new AzureNative.Sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation", new()
    {
        LandingZoneAccountName = "ExampleLZA",
        LandingZoneConfigurationName = "ExampleLZC",
        Properties = new AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourcePropertiesArgs
        {
            AzureBastionCreationOption = AzureNative.Sovereign.ResourceCreationOptions.Yes,
            AzureBastionSubnetCidrBlock = "10.20.255.0/24",
            CustomNamingConvention = new[]
            {
                new AzureNative.Sovereign.Inputs.CustomNamingConventionArgs
                {
                    Formula = "{DeploymentSuffix}",
                    ResourceType = AzureNative.Sovereign.ResourceType.AzureFirewalls,
                },
            },
            DdosProtectionCreationOption = AzureNative.Sovereign.ResourceCreationOptions.Yes,
            DecommissionedMgMetadata = new AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesArgs
            {
                Create = false,
                PolicyInitiativesAssignmentProperties = new() { },
            },
            FirewallCreationOption = AzureNative.Sovereign.FirewallCreationOptions.Standard,
            FirewallSubnetCidrBlock = "10.20.255.0/24",
            GatewaySubnetCidrBlock = "10.20.255.0/24",
            HubNetworkCidrBlock = "10.20.255.0/24",
            LandingZonesMgChildren = new[]
            {
                new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
                {
                    Name = "Corp",
                    PolicyInitiativesAssignmentProperties = new[]
                    {
                        new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                        {
                            AssignmentParameters = null,
                            PolicyInitiativeId = "c138fd1a-e08f-4318-9490-d11ef2c2f9c1",
                        },
                    },
                },
            },
            LandingZonesMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new() { },
            },
            LogAnalyticsWorkspaceCreationOption = AzureNative.Sovereign.ResourceCreationOptions.No,
            LogRetentionInDays = 540,
            ManagedIdentity = new AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesArgs
            {
                Type = AzureNative.Sovereign.ManagedIdentityResourceType.SystemAssigned,
            },
            NamingConventionFormula = "{ResourceTypeAbbreviation}",
            PlatformConnectivityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new() { },
            },
            PlatformIdentityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new() { },
            },
            PlatformManagementMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new() { },
            },
            PlatformMgChildren = new[]
            {
                new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
                {
                    Name = "childmg1",
                    PolicyInitiativesAssignmentProperties = new() { },
                },
                new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
                {
                    Name = "childmg2",
                    PolicyInitiativesAssignmentProperties = new() { },
                },
            },
            PlatformMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new() { },
            },
            SandboxMgMetadata = new AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesArgs
            {
                Create = true,
                PolicyInitiativesAssignmentProperties = new() { },
            },
            Tags = new[]
            {
                new AzureNative.Sovereign.Inputs.TagsArgs
                {
                    Name = "tag1",
                    Value = "do",
                },
                new AzureNative.Sovereign.Inputs.TagsArgs
                {
                    Name = "tag2",
                    Value = "do",
                },
            },
            TopLevelMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["Effect"] = "Audit",
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f",
                    },
                },
            },
        },
        ResourceGroupName = "ExampleResourceGroup",
    });

});

    package main

import (
	sovereign "github.com/pulumi/pulumi-azure-native-sdk/sovereign/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sovereign.NewLandingZoneConfigurationOperation(ctx, "landingZoneConfigurationOperation", &sovereign.LandingZoneConfigurationOperationArgs{
			LandingZoneAccountName:       pulumi.String("ExampleLZA"),
			LandingZoneConfigurationName: pulumi.String("ExampleLZC"),
			Properties: &sovereign.LandingZoneConfigurationResourcePropertiesArgs{
				AzureBastionCreationOption:  pulumi.String(sovereign.ResourceCreationOptionsYes),
				AzureBastionSubnetCidrBlock: pulumi.String("10.20.255.0/24"),
				CustomNamingConvention: sovereign.CustomNamingConventionArray{
					&sovereign.CustomNamingConventionArgs{
						Formula:      pulumi.String("{DeploymentSuffix}"),
						ResourceType: pulumi.String(sovereign.ResourceTypeAzureFirewalls),
					},
				},
				DdosProtectionCreationOption: pulumi.String(sovereign.ResourceCreationOptionsYes),
				DecommissionedMgMetadata: &sovereign.DecommissionedManagementGroupPropertiesArgs{
					Create:                                pulumi.Bool(false),
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				FirewallCreationOption:  pulumi.String(sovereign.FirewallCreationOptionsStandard),
				FirewallSubnetCidrBlock: pulumi.String("10.20.255.0/24"),
				GatewaySubnetCidrBlock:  pulumi.String("10.20.255.0/24"),
				HubNetworkCidrBlock:     pulumi.String("10.20.255.0/24"),
				LandingZonesMgChildren: sovereign.LandingZoneManagementGroupPropertiesArray{
					&sovereign.LandingZoneManagementGroupPropertiesArgs{
						Name: pulumi.String("Corp"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
							&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
								AssignmentParameters: pulumi.Any(map[string]interface{}{}),
								PolicyInitiativeId:   pulumi.String("c138fd1a-e08f-4318-9490-d11ef2c2f9c1"),
							},
						},
					},
				},
				LandingZonesMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				LogAnalyticsWorkspaceCreationOption: pulumi.String(sovereign.ResourceCreationOptionsNo),
				LogRetentionInDays:                  pulumi.Float64(540),
				ManagedIdentity: &sovereign.ManagedIdentityPropertiesArgs{
					Type: pulumi.String(sovereign.ManagedIdentityResourceTypeSystemAssigned),
				},
				NamingConventionFormula: pulumi.String("{ResourceTypeAbbreviation}"),
				PlatformConnectivityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				PlatformIdentityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				PlatformManagementMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				PlatformMgChildren: sovereign.PlatformManagementGroupPropertiesArray{
					&sovereign.PlatformManagementGroupPropertiesArgs{
						Name:                                  pulumi.String("childmg1"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
					},
					&sovereign.PlatformManagementGroupPropertiesArgs{
						Name:                                  pulumi.String("childmg2"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
					},
				},
				PlatformMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				SandboxMgMetadata: &sovereign.SandboxManagementGroupPropertiesArgs{
					Create:                                pulumi.Bool(true),
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
				},
				Tags: sovereign.TagsArray{
					&sovereign.TagsArgs{
						Name:  pulumi.String("tag1"),
						Value: pulumi.String("do"),
					},
					&sovereign.TagsArgs{
						Name:  pulumi.String("tag2"),
						Value: pulumi.String("do"),
					},
				},
				TopLevelMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"Effect": "Audit",
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f"),
						},
					},
				},
			},
			ResourceGroupName: pulumi.String("ExampleResourceGroup"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.sovereign.LandingZoneConfigurationOperation;
import com.pulumi.azurenative.sovereign.LandingZoneConfigurationOperationArgs;
import com.pulumi.azurenative.sovereign.inputs.LandingZoneConfigurationResourcePropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.DecommissionedManagementGroupPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.ManagementGroupPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.ManagedIdentityPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.SandboxManagementGroupPropertiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var landingZoneConfigurationOperation = new LandingZoneConfigurationOperation("landingZoneConfigurationOperation", LandingZoneConfigurationOperationArgs.builder()
            .landingZoneAccountName("ExampleLZA")
            .landingZoneConfigurationName("ExampleLZC")
            .properties(LandingZoneConfigurationResourcePropertiesArgs.builder()
                .azureBastionCreationOption("Yes")
                .azureBastionSubnetCidrBlock("10.20.255.0/24")
                .customNamingConvention(CustomNamingConventionArgs.builder()
                    .formula("{DeploymentSuffix}")
                    .resourceType("azureFirewalls")
                    .build())
                .ddosProtectionCreationOption("Yes")
                .decommissionedMgMetadata(DecommissionedManagementGroupPropertiesArgs.builder()
                    .create(false)
                    .policyInitiativesAssignmentProperties()
                    .build())
                .firewallCreationOption("Standard")
                .firewallSubnetCidrBlock("10.20.255.0/24")
                .gatewaySubnetCidrBlock("10.20.255.0/24")
                .hubNetworkCidrBlock("10.20.255.0/24")
                .landingZonesMgChildren(LandingZoneManagementGroupPropertiesArgs.builder()
                    .name("Corp")
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters()
                        .policyInitiativeId("c138fd1a-e08f-4318-9490-d11ef2c2f9c1")
                        .build())
                    .build())
                .landingZonesMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties()
                    .build())
                .logAnalyticsWorkspaceCreationOption("No")
                .logRetentionInDays(540)
                .managedIdentity(ManagedIdentityPropertiesArgs.builder()
                    .type("SystemAssigned")
                    .build())
                .namingConventionFormula("{ResourceTypeAbbreviation}")
                .platformConnectivityMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties()
                    .build())
                .platformIdentityMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties()
                    .build())
                .platformManagementMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties()
                    .build())
                .platformMgChildren(                
                    PlatformManagementGroupPropertiesArgs.builder()
                        .name("childmg1")
                        .policyInitiativesAssignmentProperties()
                        .build(),
                    PlatformManagementGroupPropertiesArgs.builder()
                        .name("childmg2")
                        .policyInitiativesAssignmentProperties()
                        .build())
                .platformMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties()
                    .build())
                .sandboxMgMetadata(SandboxManagementGroupPropertiesArgs.builder()
                    .create(true)
                    .policyInitiativesAssignmentProperties()
                    .build())
                .tags(                
                    TagsArgs.builder()
                        .name("tag1")
                        .value("do")
                        .build(),
                    TagsArgs.builder()
                        .name("tag2")
                        .value("do")
                        .build())
                .topLevelMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("Effect", "Audit"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f")
                        .build())
                    .build())
                .build())
            .resourceGroupName("ExampleResourceGroup")
            .build());

    }
}

    import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const landingZoneConfigurationOperation = new azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation", {
    landingZoneAccountName: "ExampleLZA",
    landingZoneConfigurationName: "ExampleLZC",
    properties: {
        azureBastionCreationOption: azure_native.sovereign.ResourceCreationOptions.Yes,
        azureBastionSubnetCidrBlock: "10.20.255.0/24",
        customNamingConvention: [{
            formula: "{DeploymentSuffix}",
            resourceType: azure_native.sovereign.ResourceType.AzureFirewalls,
        }],
        ddosProtectionCreationOption: azure_native.sovereign.ResourceCreationOptions.Yes,
        decommissionedMgMetadata: {
            create: false,
            policyInitiativesAssignmentProperties: [],
        },
        firewallCreationOption: azure_native.sovereign.FirewallCreationOptions.Standard,
        firewallSubnetCidrBlock: "10.20.255.0/24",
        gatewaySubnetCidrBlock: "10.20.255.0/24",
        hubNetworkCidrBlock: "10.20.255.0/24",
        landingZonesMgChildren: [{
            name: "Corp",
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {},
                policyInitiativeId: "c138fd1a-e08f-4318-9490-d11ef2c2f9c1",
            }],
        }],
        landingZonesMgMetadata: {
            policyInitiativesAssignmentProperties: [],
        },
        logAnalyticsWorkspaceCreationOption: azure_native.sovereign.ResourceCreationOptions.No,
        logRetentionInDays: 540,
        managedIdentity: {
            type: azure_native.sovereign.ManagedIdentityResourceType.SystemAssigned,
        },
        namingConventionFormula: "{ResourceTypeAbbreviation}",
        platformConnectivityMgMetadata: {
            policyInitiativesAssignmentProperties: [],
        },
        platformIdentityMgMetadata: {
            policyInitiativesAssignmentProperties: [],
        },
        platformManagementMgMetadata: {
            policyInitiativesAssignmentProperties: [],
        },
        platformMgChildren: [
            {
                name: "childmg1",
                policyInitiativesAssignmentProperties: [],
            },
            {
                name: "childmg2",
                policyInitiativesAssignmentProperties: [],
            },
        ],
        platformMgMetadata: {
            policyInitiativesAssignmentProperties: [],
        },
        sandboxMgMetadata: {
            create: true,
            policyInitiativesAssignmentProperties: [],
        },
        tags: [
            {
                name: "tag1",
                value: "do",
            },
            {
                name: "tag2",
                value: "do",
            },
        ],
        topLevelMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    Effect: "Audit",
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f",
            }],
        },
    },
    resourceGroupName: "ExampleResourceGroup",
});

    import pulumi
import pulumi_azure_native as azure_native

landing_zone_configuration_operation = azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation",
    landing_zone_account_name="ExampleLZA",
    landing_zone_configuration_name="ExampleLZC",
    properties={
        "azure_bastion_creation_option": azure_native.sovereign.ResourceCreationOptions.YES,
        "azure_bastion_subnet_cidr_block": "10.20.255.0/24",
        "custom_naming_convention": [{
            "formula": "{DeploymentSuffix}",
            "resource_type": azure_native.sovereign.ResourceType.AZURE_FIREWALLS,
        }],
        "ddos_protection_creation_option": azure_native.sovereign.ResourceCreationOptions.YES,
        "decommissioned_mg_metadata": {
            "create": False,
            "policy_initiatives_assignment_properties": [],
        },
        "firewall_creation_option": azure_native.sovereign.FirewallCreationOptions.STANDARD,
        "firewall_subnet_cidr_block": "10.20.255.0/24",
        "gateway_subnet_cidr_block": "10.20.255.0/24",
        "hub_network_cidr_block": "10.20.255.0/24",
        "landing_zones_mg_children": [{
            "name": "Corp",
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {},
                "policy_initiative_id": "c138fd1a-e08f-4318-9490-d11ef2c2f9c1",
            }],
        }],
        "landing_zones_mg_metadata": {
            "policy_initiatives_assignment_properties": [],
        },
        "log_analytics_workspace_creation_option": azure_native.sovereign.ResourceCreationOptions.NO,
        "log_retention_in_days": 540,
        "managed_identity": {
            "type": azure_native.sovereign.ManagedIdentityResourceType.SYSTEM_ASSIGNED,
        },
        "naming_convention_formula": "{ResourceTypeAbbreviation}",
        "platform_connectivity_mg_metadata": {
            "policy_initiatives_assignment_properties": [],
        },
        "platform_identity_mg_metadata": {
            "policy_initiatives_assignment_properties": [],
        },
        "platform_management_mg_metadata": {
            "policy_initiatives_assignment_properties": [],
        },
        "platform_mg_children": [
            {
                "name": "childmg1",
                "policy_initiatives_assignment_properties": [],
            },
            {
                "name": "childmg2",
                "policy_initiatives_assignment_properties": [],
            },
        ],
        "platform_mg_metadata": {
            "policy_initiatives_assignment_properties": [],
        },
        "sandbox_mg_metadata": {
            "create": True,
            "policy_initiatives_assignment_properties": [],
        },
        "tags": [
            {
                "name": "tag1",
                "value": "do",
            },
            {
                "name": "tag2",
                "value": "do",
            },
        ],
        "top_level_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "Effect": "Audit",
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f",
            }],
        },
    },
    resource_group_name="ExampleResourceGroup")

    resources:
  landingZoneConfigurationOperation:
    type: azure-native:sovereign:LandingZoneConfigurationOperation
    properties:
      landingZoneAccountName: ExampleLZA
      landingZoneConfigurationName: ExampleLZC
      properties:
        azureBastionCreationOption: Yes
        azureBastionSubnetCidrBlock: 10.20.255.0/24
        customNamingConvention:
          - formula: '{DeploymentSuffix}'
            resourceType: azureFirewalls
        ddosProtectionCreationOption: Yes
        decommissionedMgMetadata:
          create: false
          policyInitiativesAssignmentProperties: []
        firewallCreationOption: Standard
        firewallSubnetCidrBlock: 10.20.255.0/24
        gatewaySubnetCidrBlock: 10.20.255.0/24
        hubNetworkCidrBlock: 10.20.255.0/24
        landingZonesMgChildren:
          - name: Corp
            policyInitiativesAssignmentProperties:
              - assignmentParameters: {}
                policyInitiativeId: c138fd1a-e08f-4318-9490-d11ef2c2f9c1
        landingZonesMgMetadata:
          policyInitiativesAssignmentProperties: []
        logAnalyticsWorkspaceCreationOption: No
        logRetentionInDays: 540
        managedIdentity:
          type: SystemAssigned
        namingConventionFormula: '{ResourceTypeAbbreviation}'
        platformConnectivityMgMetadata:
          policyInitiativesAssignmentProperties: []
        platformIdentityMgMetadata:
          policyInitiativesAssignmentProperties: []
        platformManagementMgMetadata:
          policyInitiativesAssignmentProperties: []
        platformMgChildren:
          - name: childmg1
            policyInitiativesAssignmentProperties: []
          - name: childmg2
            policyInitiativesAssignmentProperties: []
        platformMgMetadata:
          policyInitiativesAssignmentProperties: []
        sandboxMgMetadata:
          create: true
          policyInitiativesAssignmentProperties: []
        tags:
          - name: tag1
            value: do
          - name: tag2
            value: do
        topLevelMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                Effect: Audit
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/0a2ebd47-3fb9-4735-a006-b7f31ddadd9f
      resourceGroupName: ExampleResourceGroup

    Create LandingZoneConfigurationOperation Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new LandingZoneConfigurationOperation(name: string, args: LandingZoneConfigurationOperationArgs, opts?: CustomResourceOptions);
    @overload
def LandingZoneConfigurationOperation(resource_name: str,
                                      args: LandingZoneConfigurationOperationArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def LandingZoneConfigurationOperation(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      landing_zone_account_name: Optional[str] = None,
                                      resource_group_name: Optional[str] = None,
                                      landing_zone_configuration_name: Optional[str] = None,
                                      properties: Optional[LandingZoneConfigurationResourcePropertiesArgs] = None)
    func NewLandingZoneConfigurationOperation(ctx *Context, name string, args LandingZoneConfigurationOperationArgs, opts ...ResourceOption) (*LandingZoneConfigurationOperation, error)
    public LandingZoneConfigurationOperation(string name, LandingZoneConfigurationOperationArgs args, CustomResourceOptions? opts = null)
    public LandingZoneConfigurationOperation(String name, LandingZoneConfigurationOperationArgs args)
public LandingZoneConfigurationOperation(String name, LandingZoneConfigurationOperationArgs args, CustomResourceOptions options)

    type: azure-native:sovereign:LandingZoneConfigurationOperation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args LandingZoneConfigurationOperationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args LandingZoneConfigurationOperationArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args LandingZoneConfigurationOperationArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args LandingZoneConfigurationOperationArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args LandingZoneConfigurationOperationArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var landingZoneConfigurationOperationResource = new AzureNative.Sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", new()
{
    LandingZoneAccountName = "string",
    ResourceGroupName = "string",
    LandingZoneConfigurationName = "string",
    Properties = new AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourcePropertiesArgs
    {
        FirewallCreationOption = "string",
        ManagedIdentity = new AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesArgs
        {
            Type = "string",
            UserAssignedIdentityResourceId = "string",
        },
        LogRetentionInDays = 0,
        DdosProtectionCreationOption = "string",
        LogAnalyticsWorkspaceCreationOption = "string",
        AzureBastionCreationOption = "string",
        HubNetworkCidrBlock = "string",
        GatewaySubnetCidrBlock = "string",
        LandingZonesMgChildren = new[]
        {
            new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
            {
                Name = "string",
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = "any",
                        PolicyInitiativeId = "string",
                    },
                },
            },
        },
        NamingConventionFormula = "string",
        ExistingLogAnalyticsWorkspaceId = "string",
        ExistingDdosProtectionId = "string",
        ExistingAzureBastionId = "string",
        LandingZonesMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        DecommissionedMgMetadata = new AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesArgs
        {
            Create = false,
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        CustomNamingConvention = new[]
        {
            new AzureNative.Sovereign.Inputs.CustomNamingConventionArgs
            {
                Formula = "string",
                ResourceType = "string",
            },
        },
        AzureBastionSubnetCidrBlock = "string",
        FirewallSubnetCidrBlock = "string",
        PlatformConnectivityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformIdentityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformManagementMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformMgChildren = new[]
        {
            new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
            {
                Name = "string",
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = "any",
                        PolicyInitiativeId = "string",
                    },
                },
            },
        },
        PlatformMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        SandboxMgMetadata = new AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesArgs
        {
            Create = false,
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        Tags = new[]
        {
            new AzureNative.Sovereign.Inputs.TagsArgs
            {
                Name = "string",
                Value = "string",
            },
        },
        TopLevelMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
    },
});

    example, err := sovereign.NewLandingZoneConfigurationOperation(ctx, "landingZoneConfigurationOperationResource", &sovereign.LandingZoneConfigurationOperationArgs{
	LandingZoneAccountName:       pulumi.String("string"),
	ResourceGroupName:            pulumi.String("string"),
	LandingZoneConfigurationName: pulumi.String("string"),
	Properties: &sovereign.LandingZoneConfigurationResourcePropertiesArgs{
		FirewallCreationOption: pulumi.String("string"),
		ManagedIdentity: &sovereign.ManagedIdentityPropertiesArgs{
			Type:                           pulumi.String("string"),
			UserAssignedIdentityResourceId: pulumi.String("string"),
		},
		LogRetentionInDays:                  pulumi.Float64(0),
		DdosProtectionCreationOption:        pulumi.String("string"),
		LogAnalyticsWorkspaceCreationOption: pulumi.String("string"),
		AzureBastionCreationOption:          pulumi.String("string"),
		HubNetworkCidrBlock:                 pulumi.String("string"),
		GatewaySubnetCidrBlock:              pulumi.String("string"),
		LandingZonesMgChildren: sovereign.LandingZoneManagementGroupPropertiesArray{
			&sovereign.LandingZoneManagementGroupPropertiesArgs{
				Name: pulumi.String("string"),
				PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
					&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
						AssignmentParameters: pulumi.Any("any"),
						PolicyInitiativeId:   pulumi.String("string"),
					},
				},
			},
		},
		NamingConventionFormula:         pulumi.String("string"),
		ExistingLogAnalyticsWorkspaceId: pulumi.String("string"),
		ExistingDdosProtectionId:        pulumi.String("string"),
		ExistingAzureBastionId:          pulumi.String("string"),
		LandingZonesMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		DecommissionedMgMetadata: &sovereign.DecommissionedManagementGroupPropertiesArgs{
			Create: pulumi.Bool(false),
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		CustomNamingConvention: sovereign.CustomNamingConventionArray{
			&sovereign.CustomNamingConventionArgs{
				Formula:      pulumi.String("string"),
				ResourceType: pulumi.String("string"),
			},
		},
		AzureBastionSubnetCidrBlock: pulumi.String("string"),
		FirewallSubnetCidrBlock:     pulumi.String("string"),
		PlatformConnectivityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformIdentityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformManagementMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformMgChildren: sovereign.PlatformManagementGroupPropertiesArray{
			&sovereign.PlatformManagementGroupPropertiesArgs{
				Name: pulumi.String("string"),
				PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
					&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
						AssignmentParameters: pulumi.Any("any"),
						PolicyInitiativeId:   pulumi.String("string"),
					},
				},
			},
		},
		PlatformMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		SandboxMgMetadata: &sovereign.SandboxManagementGroupPropertiesArgs{
			Create: pulumi.Bool(false),
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		Tags: sovereign.TagsArray{
			&sovereign.TagsArgs{
				Name:  pulumi.String("string"),
				Value: pulumi.String("string"),
			},
		},
		TopLevelMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
	},
})

    var landingZoneConfigurationOperationResource = new LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", LandingZoneConfigurationOperationArgs.builder()
    .landingZoneAccountName("string")
    .resourceGroupName("string")
    .landingZoneConfigurationName("string")
    .properties(LandingZoneConfigurationResourcePropertiesArgs.builder()
        .firewallCreationOption("string")
        .managedIdentity(ManagedIdentityPropertiesArgs.builder()
            .type("string")
            .userAssignedIdentityResourceId("string")
            .build())
        .logRetentionInDays(0)
        .ddosProtectionCreationOption("string")
        .logAnalyticsWorkspaceCreationOption("string")
        .azureBastionCreationOption("string")
        .hubNetworkCidrBlock("string")
        .gatewaySubnetCidrBlock("string")
        .landingZonesMgChildren(LandingZoneManagementGroupPropertiesArgs.builder()
            .name("string")
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .namingConventionFormula("string")
        .existingLogAnalyticsWorkspaceId("string")
        .existingDdosProtectionId("string")
        .existingAzureBastionId("string")
        .landingZonesMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .decommissionedMgMetadata(DecommissionedManagementGroupPropertiesArgs.builder()
            .create(false)
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .customNamingConvention(CustomNamingConventionArgs.builder()
            .formula("string")
            .resourceType("string")
            .build())
        .azureBastionSubnetCidrBlock("string")
        .firewallSubnetCidrBlock("string")
        .platformConnectivityMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformIdentityMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformManagementMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformMgChildren(PlatformManagementGroupPropertiesArgs.builder()
            .name("string")
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .sandboxMgMetadata(SandboxManagementGroupPropertiesArgs.builder()
            .create(false)
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .tags(TagsArgs.builder()
            .name("string")
            .value("string")
            .build())
        .topLevelMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .build())
    .build());

    landing_zone_configuration_operation_resource = azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource",
    landing_zone_account_name="string",
    resource_group_name="string",
    landing_zone_configuration_name="string",
    properties={
        "firewall_creation_option": "string",
        "managed_identity": {
            "type": "string",
            "user_assigned_identity_resource_id": "string",
        },
        "log_retention_in_days": 0,
        "ddos_protection_creation_option": "string",
        "log_analytics_workspace_creation_option": "string",
        "azure_bastion_creation_option": "string",
        "hub_network_cidr_block": "string",
        "gateway_subnet_cidr_block": "string",
        "landing_zones_mg_children": [{
            "name": "string",
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        }],
        "naming_convention_formula": "string",
        "existing_log_analytics_workspace_id": "string",
        "existing_ddos_protection_id": "string",
        "existing_azure_bastion_id": "string",
        "landing_zones_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "decommissioned_mg_metadata": {
            "create": False,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "custom_naming_convention": [{
            "formula": "string",
            "resource_type": "string",
        }],
        "azure_bastion_subnet_cidr_block": "string",
        "firewall_subnet_cidr_block": "string",
        "platform_connectivity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_identity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_management_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_mg_children": [{
            "name": "string",
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        }],
        "platform_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "sandbox_mg_metadata": {
            "create": False,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "tags": [{
            "name": "string",
            "value": "string",
        }],
        "top_level_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
    })

    const landingZoneConfigurationOperationResource = new azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", {
    landingZoneAccountName: "string",
    resourceGroupName: "string",
    landingZoneConfigurationName: "string",
    properties: {
        firewallCreationOption: "string",
        managedIdentity: {
            type: "string",
            userAssignedIdentityResourceId: "string",
        },
        logRetentionInDays: 0,
        ddosProtectionCreationOption: "string",
        logAnalyticsWorkspaceCreationOption: "string",
        azureBastionCreationOption: "string",
        hubNetworkCidrBlock: "string",
        gatewaySubnetCidrBlock: "string",
        landingZonesMgChildren: [{
            name: "string",
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        }],
        namingConventionFormula: "string",
        existingLogAnalyticsWorkspaceId: "string",
        existingDdosProtectionId: "string",
        existingAzureBastionId: "string",
        landingZonesMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        decommissionedMgMetadata: {
            create: false,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        customNamingConvention: [{
            formula: "string",
            resourceType: "string",
        }],
        azureBastionSubnetCidrBlock: "string",
        firewallSubnetCidrBlock: "string",
        platformConnectivityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformIdentityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformManagementMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformMgChildren: [{
            name: "string",
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        }],
        platformMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        sandboxMgMetadata: {
            create: false,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        tags: [{
            name: "string",
            value: "string",
        }],
        topLevelMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
    },
});

    type: azure-native:sovereign:LandingZoneConfigurationOperation
properties:
    landingZoneAccountName: string
    landingZoneConfigurationName: string
    properties:
        azureBastionCreationOption: string
        azureBastionSubnetCidrBlock: string
        customNamingConvention:
            - formula: string
              resourceType: string
        ddosProtectionCreationOption: string
        decommissionedMgMetadata:
            create: false
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        existingAzureBastionId: string
        existingDdosProtectionId: string
        existingLogAnalyticsWorkspaceId: string
        firewallCreationOption: string
        firewallSubnetCidrBlock: string
        gatewaySubnetCidrBlock: string
        hubNetworkCidrBlock: string
        landingZonesMgChildren:
            - name: string
              policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        landingZonesMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        logAnalyticsWorkspaceCreationOption: string
        logRetentionInDays: 0
        managedIdentity:
            type: string
            userAssignedIdentityResourceId: string
        namingConventionFormula: string
        platformConnectivityMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformIdentityMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformManagementMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformMgChildren:
            - name: string
              policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        sandboxMgMetadata:
            create: false
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        tags:
            - name: string
              value: string
        topLevelMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
    resourceGroupName: string

    LandingZoneConfigurationOperation Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The LandingZoneConfigurationOperation resource accepts the following input properties:

    LandingZoneAccountName string
    The landing zone account.
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    LandingZoneConfigurationName string
    The landing zone configuration name
    Properties Pulumi.AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourceProperties
    The resource-specific properties for this resource.
    LandingZoneAccountName string
    The landing zone account.
    ResourceGroupName string
    The name of the resource group. The name is case insensitive.
    LandingZoneConfigurationName string
    The landing zone configuration name
    Properties LandingZoneConfigurationResourcePropertiesArgs
    The resource-specific properties for this resource.
    landingZoneAccountName String
    The landing zone account.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    landingZoneConfigurationName String
    The landing zone configuration name
    properties LandingZoneConfigurationResourceProperties
    The resource-specific properties for this resource.
    landingZoneAccountName string
    The landing zone account.
    resourceGroupName string
    The name of the resource group. The name is case insensitive.
    landingZoneConfigurationName string
    The landing zone configuration name
    properties LandingZoneConfigurationResourceProperties
    The resource-specific properties for this resource.
    landing_zone_account_name str
    The landing zone account.
    resource_group_name str
    The name of the resource group. The name is case insensitive.
    landing_zone_configuration_name str
    The landing zone configuration name
    properties LandingZoneConfigurationResourcePropertiesArgs
    The resource-specific properties for this resource.
    landingZoneAccountName String
    The landing zone account.
    resourceGroupName String
    The name of the resource group. The name is case insensitive.
    landingZoneConfigurationName String
    The landing zone configuration name
    properties Property Map
    The resource-specific properties for this resource.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the LandingZoneConfigurationOperation resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    SystemData Pulumi.AzureNative.Sovereign.Outputs.SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    Id string
    The provider-assigned unique ID for this managed resource.
    Name string
    The name of the resource
    SystemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    Type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    id string
    The provider-assigned unique ID for this managed resource.
    name string
    The name of the resource
    systemData SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type string
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    id str
    The provider-assigned unique ID for this managed resource.
    name str
    The name of the resource
    system_data SystemDataResponse
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type str
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
    id String
    The provider-assigned unique ID for this managed resource.
    name String
    The name of the resource
    systemData Property Map
    Azure Resource Manager metadata containing createdBy and modifiedBy information.
    type String
    The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

    Supporting Types

    CustomNamingConvention, CustomNamingConventionArgs

    Formula string
    The custom naming formula for the resource type.
    ResourceType string | Pulumi.AzureNative.Sovereign.ResourceType
    The type of the resource.
    Formula string
    The custom naming formula for the resource type.
    ResourceType string | ResourceType
    The type of the resource.
    formula String
    The custom naming formula for the resource type.
    resourceType String | ResourceType
    The type of the resource.
    formula string
    The custom naming formula for the resource type.
    resourceType string | ResourceType
    The type of the resource.
    formula str
    The custom naming formula for the resource type.
    resource_type str | ResourceType
    The type of the resource.

    CustomNamingConventionResponse, CustomNamingConventionResponseArgs

    Formula string
    The custom naming formula for the resource type.
    ResourceType string
    The type of the resource.
    Formula string
    The custom naming formula for the resource type.
    ResourceType string
    The type of the resource.
    formula String
    The custom naming formula for the resource type.
    resourceType String
    The type of the resource.
    formula string
    The custom naming formula for the resource type.
    resourceType string
    The type of the resource.
    formula str
    The custom naming formula for the resource type.
    resource_type str
    The type of the resource.
    formula String
    The custom naming formula for the resource type.
    resourceType String
    The type of the resource.

    DecommissionedManagementGroupProperties, DecommissionedManagementGroupPropertiesArgs

    Create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    Create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentProperties
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    create boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentProperties[]
    Array of policy initiatives applied to the management group.
    create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentProperties]
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    DecommissionedManagementGroupPropertiesResponse, DecommissionedManagementGroupPropertiesResponseArgs

    Create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    Create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentPropertiesResponse
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    create boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentPropertiesResponse[]
    Array of policy initiatives applied to the management group.
    create bool
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentPropertiesResponse]
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    FirewallCreationOptions, FirewallCreationOptionsArgs

    None
    NoneSelect 'None' value to skip Firewall deployment.
    Standard
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    Premium
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
    FirewallCreationOptionsNone
    NoneSelect 'None' value to skip Firewall deployment.
    FirewallCreationOptionsStandard
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    FirewallCreationOptionsPremium
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
    None
    NoneSelect 'None' value to skip Firewall deployment.
    Standard
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    Premium
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
    None
    NoneSelect 'None' value to skip Firewall deployment.
    Standard
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    Premium
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
    NONE
    NoneSelect 'None' value to skip Firewall deployment.
    STANDARD
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    PREMIUM
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
    "None"
    NoneSelect 'None' value to skip Firewall deployment.
    "Standard"
    StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
    "Premium"
    PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.

    LandingZoneConfigurationResourceProperties, LandingZoneConfigurationResourcePropertiesArgs

    AzureBastionCreationOption string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    DdosProtectionCreationOption string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    FirewallCreationOption string | Pulumi.AzureNative.Sovereign.FirewallCreationOptions
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    GatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    HubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    LogAnalyticsWorkspaceCreationOption string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    LogRetentionInDays double
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    ManagedIdentity Pulumi.AzureNative.Sovereign.Inputs.ManagedIdentityProperties
    The managed identity to be assigned to this landing zone configuration.
    AzureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    CustomNamingConvention List<Pulumi.AzureNative.Sovereign.Inputs.CustomNamingConvention>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    DecommissionedMgMetadata Pulumi.AzureNative.Sovereign.Inputs.DecommissionedManagementGroupProperties
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    ExistingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    ExistingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    ExistingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    FirewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    LandingZonesMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.LandingZoneManagementGroupProperties>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    LandingZonesMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the 'Landing Zones' management group.
    NamingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    PlatformConnectivityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    PlatformIdentityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    PlatformManagementMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the 'Management' management group under 'Platform' management group.
    PlatformMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.PlatformManagementGroupProperties>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    PlatformMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the 'Platform' management group.
    SandboxMgMetadata Pulumi.AzureNative.Sovereign.Inputs.SandboxManagementGroupProperties
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    Tags List<Pulumi.AzureNative.Sovereign.Inputs.Tags>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    TopLevelMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
    The assigned policies of the parent management group.
    AzureBastionCreationOption string | ResourceCreationOptions
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    DdosProtectionCreationOption string | ResourceCreationOptions
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    FirewallCreationOption string | FirewallCreationOptions
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    GatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    HubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    LogAnalyticsWorkspaceCreationOption string | ResourceCreationOptions
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    LogRetentionInDays float64
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    ManagedIdentity ManagedIdentityProperties
    The managed identity to be assigned to this landing zone configuration.
    AzureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    CustomNamingConvention []CustomNamingConvention
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    DecommissionedMgMetadata DecommissionedManagementGroupProperties
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    ExistingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    ExistingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    ExistingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    FirewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    LandingZonesMgChildren []LandingZoneManagementGroupProperties
    The child management groups of 'Landing Zones' management group and their assigned policies.
    LandingZonesMgMetadata ManagementGroupProperties
    The assigned policies of the 'Landing Zones' management group.
    NamingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    PlatformConnectivityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    PlatformIdentityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    PlatformManagementMgMetadata ManagementGroupProperties
    The assigned policies of the 'Management' management group under 'Platform' management group.
    PlatformMgChildren []PlatformManagementGroupProperties
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    PlatformMgMetadata ManagementGroupProperties
    The assigned policies of the 'Platform' management group.
    SandboxMgMetadata SandboxManagementGroupProperties
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    Tags []Tags
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    TopLevelMgMetadata ManagementGroupProperties
    The assigned policies of the parent management group.
    azureBastionCreationOption String | ResourceCreationOptions
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption String | ResourceCreationOptions
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption String | FirewallCreationOptions
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock String
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock String
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption String | ResourceCreationOptions
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays Double
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity ManagedIdentityProperties
    The managed identity to be assigned to this landing zone configuration.
    azureBastionSubnetCidrBlock String
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention List<CustomNamingConvention>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata DecommissionedManagementGroupProperties
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId String
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId String
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId String
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock String
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren List<LandingZoneManagementGroupProperties>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata ManagementGroupProperties
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula String
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata ManagementGroupProperties
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren List<PlatformManagementGroupProperties>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata ManagementGroupProperties
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata SandboxManagementGroupProperties
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags List<Tags>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata ManagementGroupProperties
    The assigned policies of the parent management group.
    azureBastionCreationOption string | ResourceCreationOptions
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption string | ResourceCreationOptions
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption string | FirewallCreationOptions
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption string | ResourceCreationOptions
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays number
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity ManagedIdentityProperties
    The managed identity to be assigned to this landing zone configuration.
    azureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention CustomNamingConvention[]
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata DecommissionedManagementGroupProperties
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren LandingZoneManagementGroupProperties[]
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata ManagementGroupProperties
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata ManagementGroupProperties
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata ManagementGroupProperties
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren PlatformManagementGroupProperties[]
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata ManagementGroupProperties
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata SandboxManagementGroupProperties
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags Tags[]
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata ManagementGroupProperties
    The assigned policies of the parent management group.
    azure_bastion_creation_option str | ResourceCreationOptions
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddos_protection_creation_option str | ResourceCreationOptions
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewall_creation_option str | FirewallCreationOptions
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gateway_subnet_cidr_block str
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hub_network_cidr_block str
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    log_analytics_workspace_creation_option str | ResourceCreationOptions
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    log_retention_in_days float
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managed_identity ManagedIdentityProperties
    The managed identity to be assigned to this landing zone configuration.
    azure_bastion_subnet_cidr_block str
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    custom_naming_convention Sequence[CustomNamingConvention]
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissioned_mg_metadata DecommissionedManagementGroupProperties
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existing_azure_bastion_id str
    The resource ID of the Bastion when reusing an existing one.
    existing_ddos_protection_id str
    The resource ID of the DDoS protection plan when reusing an existing one.
    existing_log_analytics_workspace_id str
    The resource ID of the log analytics workspace when reusing an existing one.
    firewall_subnet_cidr_block str
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landing_zones_mg_children Sequence[LandingZoneManagementGroupProperties]
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landing_zones_mg_metadata ManagementGroupProperties
    The assigned policies of the 'Landing Zones' management group.
    naming_convention_formula str
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platform_connectivity_mg_metadata ManagementGroupProperties
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platform_identity_mg_metadata ManagementGroupProperties
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platform_management_mg_metadata ManagementGroupProperties
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platform_mg_children Sequence[PlatformManagementGroupProperties]
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platform_mg_metadata ManagementGroupProperties
    The assigned policies of the 'Platform' management group.
    sandbox_mg_metadata SandboxManagementGroupProperties
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags Sequence[Tags]
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    top_level_mg_metadata ManagementGroupProperties
    The assigned policies of the parent management group.
    azureBastionCreationOption String | "Yes" | "No" | "UseExisting"
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption String | "Yes" | "No" | "UseExisting"
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption String | "None" | "Standard" | "Premium"
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock String
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock String
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption String | "Yes" | "No" | "UseExisting"
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays Number
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity Property Map
    The managed identity to be assigned to this landing zone configuration.
    azureBastionSubnetCidrBlock String
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention List<Property Map>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata Property Map
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId String
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId String
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId String
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock String
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren List<Property Map>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata Property Map
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula String
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata Property Map
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata Property Map
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata Property Map
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren List<Property Map>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata Property Map
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata Property Map
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags List<Property Map>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata Property Map
    The assigned policies of the parent management group.

    LandingZoneConfigurationResourcePropertiesResponse, LandingZoneConfigurationResourcePropertiesResponseArgs

    AuthoringStatus string
    The status that indicates the current phase of the configuration process for a deployment.
    AzureBastionCreationOption string
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    DdosProtectionCreationOption string
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    FirewallCreationOption string
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    GatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    HubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    LogAnalyticsWorkspaceCreationOption string
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    LogRetentionInDays double
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    ManagedIdentity Pulumi.AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesResponse
    The managed identity to be assigned to this landing zone configuration.
    ProvisioningState string
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    AzureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    CustomNamingConvention List<Pulumi.AzureNative.Sovereign.Inputs.CustomNamingConventionResponse>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    DecommissionedMgMetadata Pulumi.AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesResponse
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    ExistingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    ExistingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    ExistingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    FirewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    LandingZonesMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesResponse>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    LandingZonesMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the 'Landing Zones' management group.
    NamingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    PlatformConnectivityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    PlatformIdentityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    PlatformManagementMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the 'Management' management group under 'Platform' management group.
    PlatformMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesResponse>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    PlatformMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the 'Platform' management group.
    SandboxMgMetadata Pulumi.AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesResponse
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    Tags List<Pulumi.AzureNative.Sovereign.Inputs.TagsResponse>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    TopLevelMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
    The assigned policies of the parent management group.
    AuthoringStatus string
    The status that indicates the current phase of the configuration process for a deployment.
    AzureBastionCreationOption string
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    DdosProtectionCreationOption string
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    FirewallCreationOption string
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    GatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    HubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    LogAnalyticsWorkspaceCreationOption string
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    LogRetentionInDays float64
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    ManagedIdentity ManagedIdentityPropertiesResponse
    The managed identity to be assigned to this landing zone configuration.
    ProvisioningState string
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    AzureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    CustomNamingConvention []CustomNamingConventionResponse
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    DecommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    ExistingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    ExistingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    ExistingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    FirewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    LandingZonesMgChildren []LandingZoneManagementGroupPropertiesResponse
    The child management groups of 'Landing Zones' management group and their assigned policies.
    LandingZonesMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Landing Zones' management group.
    NamingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    PlatformConnectivityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    PlatformIdentityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    PlatformManagementMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Management' management group under 'Platform' management group.
    PlatformMgChildren []PlatformManagementGroupPropertiesResponse
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    PlatformMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Platform' management group.
    SandboxMgMetadata SandboxManagementGroupPropertiesResponse
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    Tags []TagsResponse
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    TopLevelMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the parent management group.
    authoringStatus String
    The status that indicates the current phase of the configuration process for a deployment.
    azureBastionCreationOption String
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption String
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption String
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock String
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock String
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption String
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays Double
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity ManagedIdentityPropertiesResponse
    The managed identity to be assigned to this landing zone configuration.
    provisioningState String
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    azureBastionSubnetCidrBlock String
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention List<CustomNamingConventionResponse>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId String
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId String
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId String
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock String
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren List<LandingZoneManagementGroupPropertiesResponse>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula String
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren List<PlatformManagementGroupPropertiesResponse>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata SandboxManagementGroupPropertiesResponse
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags List<TagsResponse>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the parent management group.
    authoringStatus string
    The status that indicates the current phase of the configuration process for a deployment.
    azureBastionCreationOption string
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption string
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption string
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock string
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock string
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption string
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays number
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity ManagedIdentityPropertiesResponse
    The managed identity to be assigned to this landing zone configuration.
    provisioningState string
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    azureBastionSubnetCidrBlock string
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention CustomNamingConventionResponse[]
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId string
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId string
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId string
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock string
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren LandingZoneManagementGroupPropertiesResponse[]
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula string
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren PlatformManagementGroupPropertiesResponse[]
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata SandboxManagementGroupPropertiesResponse
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags TagsResponse[]
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata ManagementGroupPropertiesResponse
    The assigned policies of the parent management group.
    authoring_status str
    The status that indicates the current phase of the configuration process for a deployment.
    azure_bastion_creation_option str
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddos_protection_creation_option str
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewall_creation_option str
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gateway_subnet_cidr_block str
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hub_network_cidr_block str
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    log_analytics_workspace_creation_option str
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    log_retention_in_days float
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managed_identity ManagedIdentityPropertiesResponse
    The managed identity to be assigned to this landing zone configuration.
    provisioning_state str
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    azure_bastion_subnet_cidr_block str
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    custom_naming_convention Sequence[CustomNamingConventionResponse]
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissioned_mg_metadata DecommissionedManagementGroupPropertiesResponse
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existing_azure_bastion_id str
    The resource ID of the Bastion when reusing an existing one.
    existing_ddos_protection_id str
    The resource ID of the DDoS protection plan when reusing an existing one.
    existing_log_analytics_workspace_id str
    The resource ID of the log analytics workspace when reusing an existing one.
    firewall_subnet_cidr_block str
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landing_zones_mg_children Sequence[LandingZoneManagementGroupPropertiesResponse]
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landing_zones_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Landing Zones' management group.
    naming_convention_formula str
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platform_connectivity_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platform_identity_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platform_management_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platform_mg_children Sequence[PlatformManagementGroupPropertiesResponse]
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platform_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the 'Platform' management group.
    sandbox_mg_metadata SandboxManagementGroupPropertiesResponse
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags Sequence[TagsResponse]
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    top_level_mg_metadata ManagementGroupPropertiesResponse
    The assigned policies of the parent management group.
    authoringStatus String
    The status that indicates the current phase of the configuration process for a deployment.
    azureBastionCreationOption String
    Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
    ddosProtectionCreationOption String
    Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
    firewallCreationOption String
    Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
    gatewaySubnetCidrBlock String
    The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
    hubNetworkCidrBlock String
    The Virtual Network address. Specify the address using IPv4 CIDR notation.
    logAnalyticsWorkspaceCreationOption String
    Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
    logRetentionInDays Number
    Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
    managedIdentity Property Map
    The managed identity to be assigned to this landing zone configuration.
    provisioningState String
    The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
    azureBastionSubnetCidrBlock String
    The Bastion subnet address. Specify the address using IPv4 CIDR notation.
    customNamingConvention List<Property Map>
    The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
    decommissionedMgMetadata Property Map
    The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
    existingAzureBastionId String
    The resource ID of the Bastion when reusing an existing one.
    existingDdosProtectionId String
    The resource ID of the DDoS protection plan when reusing an existing one.
    existingLogAnalyticsWorkspaceId String
    The resource ID of the log analytics workspace when reusing an existing one.
    firewallSubnetCidrBlock String
    The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
    landingZonesMgChildren List<Property Map>
    The child management groups of 'Landing Zones' management group and their assigned policies.
    landingZonesMgMetadata Property Map
    The assigned policies of the 'Landing Zones' management group.
    namingConventionFormula String
    The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
    platformConnectivityMgMetadata Property Map
    The assigned policies of the 'Connectivity' management group under 'Platform' management group.
    platformIdentityMgMetadata Property Map
    The assigned policies of the 'Identity' management group under 'Platform' management group.
    platformManagementMgMetadata Property Map
    The assigned policies of the 'Management' management group under 'Platform' management group.
    platformMgChildren List<Property Map>
    The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
    platformMgMetadata Property Map
    The assigned policies of the 'Platform' management group.
    sandboxMgMetadata Property Map
    The assigned policies of the 'Sandbox' management group and indicator to create it or not.
    tags List<Property Map>
    Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
    topLevelMgMetadata Property Map
    The assigned policies of the parent management group.

    LandingZoneManagementGroupProperties, LandingZoneManagementGroupPropertiesArgs

    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentProperties
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    name string
    Management group name.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentProperties[]
    Array of policy initiatives applied to the management group.
    name str
    Management group name.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentProperties]
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    LandingZoneManagementGroupPropertiesResponse, LandingZoneManagementGroupPropertiesResponseArgs

    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentPropertiesResponse
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    name string
    Management group name.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentPropertiesResponse[]
    Array of policy initiatives applied to the management group.
    name str
    Management group name.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentPropertiesResponse]
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    ManagedIdentityProperties, ManagedIdentityPropertiesArgs

    Type string | Pulumi.AzureNative.Sovereign.ManagedIdentityResourceType
    The type of managed identity.
    UserAssignedIdentityResourceId string
    The resource id of the managed identity.
    Type string | ManagedIdentityResourceType
    The type of managed identity.
    UserAssignedIdentityResourceId string
    The resource id of the managed identity.
    type String | ManagedIdentityResourceType
    The type of managed identity.
    userAssignedIdentityResourceId String
    The resource id of the managed identity.
    type string | ManagedIdentityResourceType
    The type of managed identity.
    userAssignedIdentityResourceId string
    The resource id of the managed identity.
    type str | ManagedIdentityResourceType
    The type of managed identity.
    user_assigned_identity_resource_id str
    The resource id of the managed identity.
    type String | "SystemAssigned" | "UserAssigned"
    The type of managed identity.
    userAssignedIdentityResourceId String
    The resource id of the managed identity.

    ManagedIdentityPropertiesResponse, ManagedIdentityPropertiesResponseArgs

    Type string
    The type of managed identity.
    UserAssignedIdentityResourceId string
    The resource id of the managed identity.
    Type string
    The type of managed identity.
    UserAssignedIdentityResourceId string
    The resource id of the managed identity.
    type String
    The type of managed identity.
    userAssignedIdentityResourceId String
    The resource id of the managed identity.
    type string
    The type of managed identity.
    userAssignedIdentityResourceId string
    The resource id of the managed identity.
    type str
    The type of managed identity.
    user_assigned_identity_resource_id str
    The resource id of the managed identity.
    type String
    The type of managed identity.
    userAssignedIdentityResourceId String
    The resource id of the managed identity.

    ManagedIdentityResourceType, ManagedIdentityResourceTypeArgs

    SystemAssigned
    SystemAssignedSystem assigned managed identity.
    UserAssigned
    UserAssignedUser assigned managed identity.
    ManagedIdentityResourceTypeSystemAssigned
    SystemAssignedSystem assigned managed identity.
    ManagedIdentityResourceTypeUserAssigned
    UserAssignedUser assigned managed identity.
    SystemAssigned
    SystemAssignedSystem assigned managed identity.
    UserAssigned
    UserAssignedUser assigned managed identity.
    SystemAssigned
    SystemAssignedSystem assigned managed identity.
    UserAssigned
    UserAssignedUser assigned managed identity.
    SYSTEM_ASSIGNED
    SystemAssignedSystem assigned managed identity.
    USER_ASSIGNED
    UserAssignedUser assigned managed identity.
    "SystemAssigned"
    SystemAssignedSystem assigned managed identity.
    "UserAssigned"
    UserAssignedUser assigned managed identity.

    ManagementGroupProperties, ManagementGroupPropertiesArgs

    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentProperties
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentProperties[]
    Array of policy initiatives applied to the management group.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentProperties]
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    ManagementGroupPropertiesResponse, ManagementGroupPropertiesResponseArgs

    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentPropertiesResponse
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentPropertiesResponse[]
    Array of policy initiatives applied to the management group.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    PlatformManagementGroupProperties, PlatformManagementGroupPropertiesArgs

    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentProperties
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    name string
    Management group name.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentProperties[]
    Array of policy initiatives applied to the management group.
    name str
    Management group name.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentProperties]
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    PlatformManagementGroupPropertiesResponse, PlatformManagementGroupPropertiesResponseArgs

    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    Name string
    Management group name.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentPropertiesResponse
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    name string
    Management group name.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentPropertiesResponse[]
    Array of policy initiatives applied to the management group.
    name str
    Management group name.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentPropertiesResponse]
    Array of policy initiatives applied to the management group.
    name String
    Management group name.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    PolicyInitiativeAssignmentProperties, PolicyInitiativeAssignmentPropertiesArgs

    AssignmentParameters object
    The parameters of the assigned policy initiative.
    PolicyInitiativeId string
    The fully qualified id of the policy initiative.
    AssignmentParameters interface{}
    The parameters of the assigned policy initiative.
    PolicyInitiativeId string
    The fully qualified id of the policy initiative.
    assignmentParameters Object
    The parameters of the assigned policy initiative.
    policyInitiativeId String
    The fully qualified id of the policy initiative.
    assignmentParameters any
    The parameters of the assigned policy initiative.
    policyInitiativeId string
    The fully qualified id of the policy initiative.
    assignment_parameters Any
    The parameters of the assigned policy initiative.
    policy_initiative_id str
    The fully qualified id of the policy initiative.
    assignmentParameters Any
    The parameters of the assigned policy initiative.
    policyInitiativeId String
    The fully qualified id of the policy initiative.

    PolicyInitiativeAssignmentPropertiesResponse, PolicyInitiativeAssignmentPropertiesResponseArgs

    AssignmentParameters object
    The parameters of the assigned policy initiative.
    PolicyInitiativeId string
    The fully qualified id of the policy initiative.
    AssignmentParameters interface{}
    The parameters of the assigned policy initiative.
    PolicyInitiativeId string
    The fully qualified id of the policy initiative.
    assignmentParameters Object
    The parameters of the assigned policy initiative.
    policyInitiativeId String
    The fully qualified id of the policy initiative.
    assignmentParameters any
    The parameters of the assigned policy initiative.
    policyInitiativeId string
    The fully qualified id of the policy initiative.
    assignment_parameters Any
    The parameters of the assigned policy initiative.
    policy_initiative_id str
    The fully qualified id of the policy initiative.
    assignmentParameters Any
    The parameters of the assigned policy initiative.
    policyInitiativeId String
    The fully qualified id of the policy initiative.

    ResourceCreationOptions, ResourceCreationOptionsArgs

    Yes
    YesValue to create a new resource.
    No
    NoValue to not create a new resource.
    UseExisting
    UseExistingValue to use an existing resource.
    ResourceCreationOptionsYes
    YesValue to create a new resource.
    ResourceCreationOptionsNo
    NoValue to not create a new resource.
    ResourceCreationOptionsUseExisting
    UseExistingValue to use an existing resource.
    Yes
    YesValue to create a new resource.
    No
    NoValue to not create a new resource.
    UseExisting
    UseExistingValue to use an existing resource.
    Yes
    YesValue to create a new resource.
    No
    NoValue to not create a new resource.
    UseExisting
    UseExistingValue to use an existing resource.
    YES
    YesValue to create a new resource.
    NO
    NoValue to not create a new resource.
    USE_EXISTING
    UseExistingValue to use an existing resource.
    "Yes"
    YesValue to create a new resource.
    "No"
    NoValue to not create a new resource.
    "UseExisting"
    UseExistingValue to use an existing resource.

    ResourceType, ResourceTypeArgs

    AzureFirewalls
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    Workspaces
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    AutomationAccounts
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    Dashboards
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    UserAssignedIdentities
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    BastionHosts
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    DdosProtectionPlans
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    NetworkSecurityGroups
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    VirtualNetworks
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    RouteTables
    routeTablesValue when customer wants to provide a custom naming convention for route table.
    ResourceTypeAzureFirewalls
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    ResourceTypeWorkspaces
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    ResourceTypeAutomationAccounts
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    ResourceTypeDashboards
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    ResourceTypeUserAssignedIdentities
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    ResourceTypeBastionHosts
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    ResourceTypeDdosProtectionPlans
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    ResourceTypeNetworkSecurityGroups
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    ResourceTypeVirtualNetworks
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    ResourceTypeRouteTables
    routeTablesValue when customer wants to provide a custom naming convention for route table.
    AzureFirewalls
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    Workspaces
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    AutomationAccounts
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    Dashboards
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    UserAssignedIdentities
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    BastionHosts
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    DdosProtectionPlans
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    NetworkSecurityGroups
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    VirtualNetworks
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    RouteTables
    routeTablesValue when customer wants to provide a custom naming convention for route table.
    AzureFirewalls
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    Workspaces
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    AutomationAccounts
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    Dashboards
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    UserAssignedIdentities
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    BastionHosts
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    DdosProtectionPlans
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    NetworkSecurityGroups
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    VirtualNetworks
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    RouteTables
    routeTablesValue when customer wants to provide a custom naming convention for route table.
    AZURE_FIREWALLS
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    WORKSPACES
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    AUTOMATION_ACCOUNTS
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    DASHBOARDS
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    USER_ASSIGNED_IDENTITIES
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    BASTION_HOSTS
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    DDOS_PROTECTION_PLANS
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    NETWORK_SECURITY_GROUPS
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    VIRTUAL_NETWORKS
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    ROUTE_TABLES
    routeTablesValue when customer wants to provide a custom naming convention for route table.
    "azureFirewalls"
    azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
    "workspaces"
    workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
    "automationAccounts"
    automationAccountsValue when customer wants to provide a custom naming convention for automation account.
    "dashboards"
    dashboardsValue when customer wants to provide a custom naming convention for dashboard.
    "userAssignedIdentities"
    userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
    "bastionHosts"
    bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
    "ddosProtectionPlans"
    ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
    "networkSecurityGroups"
    networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
    "virtualNetworks"
    virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
    "routeTables"
    routeTablesValue when customer wants to provide a custom naming convention for route table.

    SandboxManagementGroupProperties, SandboxManagementGroupPropertiesArgs

    Create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    Create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentProperties
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentProperties>
    Array of policy initiatives applied to the management group.
    create boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentProperties[]
    Array of policy initiatives applied to the management group.
    create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentProperties]
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    SandboxManagementGroupPropertiesResponse, SandboxManagementGroupPropertiesResponseArgs

    Create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    Create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    PolicyInitiativesAssignmentProperties []PolicyInitiativeAssignmentPropertiesResponse
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<PolicyInitiativeAssignmentPropertiesResponse>
    Array of policy initiatives applied to the management group.
    create boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties PolicyInitiativeAssignmentPropertiesResponse[]
    Array of policy initiatives applied to the management group.
    create bool
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policy_initiatives_assignment_properties Sequence[PolicyInitiativeAssignmentPropertiesResponse]
    Array of policy initiatives applied to the management group.
    create Boolean
    This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
    policyInitiativesAssignmentProperties List<Property Map>
    Array of policy initiatives applied to the management group.

    SystemDataResponse, SystemDataResponseArgs

    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    CreatedAt string
    The timestamp of resource creation (UTC).
    CreatedBy string
    The identity that created the resource.
    CreatedByType string
    The type of identity that created the resource.
    LastModifiedAt string
    The timestamp of resource last modification (UTC)
    LastModifiedBy string
    The identity that last modified the resource.
    LastModifiedByType string
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.
    createdAt string
    The timestamp of resource creation (UTC).
    createdBy string
    The identity that created the resource.
    createdByType string
    The type of identity that created the resource.
    lastModifiedAt string
    The timestamp of resource last modification (UTC)
    lastModifiedBy string
    The identity that last modified the resource.
    lastModifiedByType string
    The type of identity that last modified the resource.
    created_at str
    The timestamp of resource creation (UTC).
    created_by str
    The identity that created the resource.
    created_by_type str
    The type of identity that created the resource.
    last_modified_at str
    The timestamp of resource last modification (UTC)
    last_modified_by str
    The identity that last modified the resource.
    last_modified_by_type str
    The type of identity that last modified the resource.
    createdAt String
    The timestamp of resource creation (UTC).
    createdBy String
    The identity that created the resource.
    createdByType String
    The type of identity that created the resource.
    lastModifiedAt String
    The timestamp of resource last modification (UTC)
    lastModifiedBy String
    The identity that last modified the resource.
    lastModifiedByType String
    The type of identity that last modified the resource.

    Tags, TagsArgs

    Name string
    A tag name.
    Value string
    A tag value.
    Name string
    A tag name.
    Value string
    A tag value.
    name String
    A tag name.
    value String
    A tag value.
    name string
    A tag name.
    value string
    A tag value.
    name str
    A tag name.
    value str
    A tag value.
    name String
    A tag name.
    value String
    A tag value.

    TagsResponse, TagsResponseArgs

    Name string
    A tag name.
    Value string
    A tag value.
    Name string
    A tag name.
    Value string
    A tag value.
    name String
    A tag name.
    value String
    A tag value.
    name string
    A tag name.
    value string
    A tag value.
    name str
    A tag name.
    value str
    A tag value.
    name String
    A tag name.
    value String
    A tag value.

    Import

    An existing resource can be imported using its type token, name, and identifier, e.g.

    $ pulumi import azure-native:sovereign:LandingZoneConfigurationOperation lzctest /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Sovereign/landingZoneAccounts/{landingZoneAccountName}/landingZoneConfigurations/{landingZoneConfigurationName}

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Azure Native pulumi/pulumi-azure-native
    License
    Apache-2.0
    azure-native logo
    This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
    Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
    pulumi/pulumi-azure-native