This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
azure-native.storage.getStorageAccount
Explore with Pulumi AI
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi
Returns the properties for the specified storage account including but not limited to name, SKU name, location, and account status. The ListKeys operation should be used to retrieve storage keys. Azure REST API version: 2022-09-01.
Other available API versions: 2023-01-01, 2023-04-01, 2023-05-01, 2024-01-01.
Using getStorageAccount
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getStorageAccount(args: GetStorageAccountArgs, opts?: InvokeOptions): Promise<GetStorageAccountResult>
function getStorageAccountOutput(args: GetStorageAccountOutputArgs, opts?: InvokeOptions): Output<GetStorageAccountResult>def get_storage_account(account_name: Optional[str] = None,
                        expand: Optional[str] = None,
                        resource_group_name: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetStorageAccountResult
def get_storage_account_output(account_name: Optional[pulumi.Input[str]] = None,
                        expand: Optional[pulumi.Input[str]] = None,
                        resource_group_name: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetStorageAccountResult]func LookupStorageAccount(ctx *Context, args *LookupStorageAccountArgs, opts ...InvokeOption) (*LookupStorageAccountResult, error)
func LookupStorageAccountOutput(ctx *Context, args *LookupStorageAccountOutputArgs, opts ...InvokeOption) LookupStorageAccountResultOutput> Note: This function is named LookupStorageAccount in the Go SDK.
public static class GetStorageAccount 
{
    public static Task<GetStorageAccountResult> InvokeAsync(GetStorageAccountArgs args, InvokeOptions? opts = null)
    public static Output<GetStorageAccountResult> Invoke(GetStorageAccountInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetStorageAccountResult> getStorageAccount(GetStorageAccountArgs args, InvokeOptions options)
public static Output<GetStorageAccountResult> getStorageAccount(GetStorageAccountArgs args, InvokeOptions options)
fn::invoke:
  function: azure-native:storage:getStorageAccount
  arguments:
    # arguments dictionaryThe following arguments are supported:
- AccountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- ResourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- Expand string
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
- AccountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- ResourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- Expand string
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
- accountName String
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- resourceGroup StringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- expand String
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
- accountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- resourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- expand string
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
- account_name str
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- resource_group_ strname 
- The name of the resource group within the user's subscription. The name is case insensitive.
- expand str
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
- accountName String
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- resourceGroup StringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- expand String
- May be used to expand the properties within account's properties. By default, data is not included when fetching properties. Currently we only support geoReplicationStats and blobRestoreStatus.
getStorageAccount Result
The following output properties are available:
- AccessTier string
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- BlobRestore Pulumi.Status Azure Native. Storage. Outputs. Blob Restore Status Response 
- Blob restore status
- CreationTime string
- Gets the creation date and time of the storage account in UTC.
- CustomDomain Pulumi.Azure Native. Storage. Outputs. Custom Domain Response 
- Gets the custom domain the user assigned to this storage account.
- Encryption
Pulumi.Azure Native. Storage. Outputs. Encryption Response 
- Encryption settings to be used for server-side encryption for the storage account.
- FailoverIn boolProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- GeoReplication Pulumi.Stats Azure Native. Storage. Outputs. Geo Replication Stats Response 
- Geo Replication Stats
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- KeyCreation Pulumi.Time Azure Native. Storage. Outputs. Key Creation Time Response 
- Storage account keys creation time.
- KeyPolicy Pulumi.Azure Native. Storage. Outputs. Key Policy Response 
- KeyPolicy assigned to the storage account.
- Kind string
- Gets the Kind.
- LastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Location string
- The geo-location where the resource lives
- Name string
- The name of the resource
- NetworkRule Pulumi.Set Azure Native. Storage. Outputs. Network Rule Set Response 
- Network rule set
- PrimaryEndpoints Pulumi.Azure Native. Storage. Outputs. Endpoints Response 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- PrimaryLocation string
- Gets the location of the primary data center for the storage account.
- PrivateEndpoint List<Pulumi.Connections Azure Native. Storage. Outputs. Private Endpoint Connection Response> 
- List of private endpoint connection associated with the specified storage account
- ProvisioningState string
- Gets the status of the storage account at the time the operation was called.
- SasPolicy Pulumi.Azure Native. Storage. Outputs. Sas Policy Response 
- SasPolicy assigned to the storage account.
- SecondaryEndpoints Pulumi.Azure Native. Storage. Outputs. Endpoints Response 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- SecondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Sku
Pulumi.Azure Native. Storage. Outputs. Sku Response 
- Gets the SKU.
- StatusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- StatusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- AllowBlob boolPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- AllowCross boolTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- AllowedCopy stringScope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- AzureFiles Pulumi.Identity Based Authentication Azure Native. Storage. Outputs. Azure Files Identity Based Authentication Response 
- Provides the identity based authentication settings for Azure Files.
- DefaultTo boolOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- DnsEndpoint stringType 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- EnableHttps boolTraffic Only 
- Allows https traffic only to storage service if sets to true.
- EnableNfs boolV3 
- NFS 3.0 protocol support enabled if set to true.
- ExtendedLocation Pulumi.Azure Native. Storage. Outputs. Extended Location Response 
- The extendedLocation of the resource.
- Identity
Pulumi.Azure Native. Storage. Outputs. Identity Response 
- The identity of the resource.
- ImmutableStorage Pulumi.With Versioning Azure Native. Storage. Outputs. Immutable Storage Account Response 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- IsHns boolEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- IsLocal boolUser Enabled 
- Enables local users feature, if set to true
- IsSftp boolEnabled 
- Enables Secure File Transfer Protocol, if set to true
- string
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- MinimumTls stringVersion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- PublicNetwork stringAccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- RoutingPreference Pulumi.Azure Native. Storage. Outputs. Routing Preference Response 
- Maintains information about the network routing choice opted by the user for data transfer
- StorageAccount Pulumi.Sku Conversion Status Azure Native. Storage. Outputs. Storage Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- Dictionary<string, string>
- Resource tags.
- AccessTier string
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- BlobRestore BlobStatus Restore Status Response 
- Blob restore status
- CreationTime string
- Gets the creation date and time of the storage account in UTC.
- CustomDomain CustomDomain Response 
- Gets the custom domain the user assigned to this storage account.
- Encryption
EncryptionResponse 
- Encryption settings to be used for server-side encryption for the storage account.
- FailoverIn boolProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- GeoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- KeyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- KeyPolicy KeyPolicy Response 
- KeyPolicy assigned to the storage account.
- Kind string
- Gets the Kind.
- LastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Location string
- The geo-location where the resource lives
- Name string
- The name of the resource
- NetworkRule NetworkSet Rule Set Response 
- Network rule set
- PrimaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- PrimaryLocation string
- Gets the location of the primary data center for the storage account.
- PrivateEndpoint []PrivateConnections Endpoint Connection Response 
- List of private endpoint connection associated with the specified storage account
- ProvisioningState string
- Gets the status of the storage account at the time the operation was called.
- SasPolicy SasPolicy Response 
- SasPolicy assigned to the storage account.
- SecondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- SecondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Sku
SkuResponse 
- Gets the SKU.
- StatusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- StatusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- AllowBlob boolPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- AllowCross boolTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- AllowedCopy stringScope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- AzureFiles AzureIdentity Based Authentication Files Identity Based Authentication Response 
- Provides the identity based authentication settings for Azure Files.
- DefaultTo boolOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- DnsEndpoint stringType 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- EnableHttps boolTraffic Only 
- Allows https traffic only to storage service if sets to true.
- EnableNfs boolV3 
- NFS 3.0 protocol support enabled if set to true.
- ExtendedLocation ExtendedLocation Response 
- The extendedLocation of the resource.
- Identity
IdentityResponse 
- The identity of the resource.
- ImmutableStorage ImmutableWith Versioning Storage Account Response 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- IsHns boolEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- IsLocal boolUser Enabled 
- Enables local users feature, if set to true
- IsSftp boolEnabled 
- Enables Secure File Transfer Protocol, if set to true
- string
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- MinimumTls stringVersion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- PublicNetwork stringAccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- RoutingPreference RoutingPreference Response 
- Maintains information about the network routing choice opted by the user for data transfer
- StorageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- map[string]string
- Resource tags.
- accessTier String
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- blobRestore BlobStatus Restore Status Response 
- Blob restore status
- creationTime String
- Gets the creation date and time of the storage account in UTC.
- customDomain CustomDomain Response 
- Gets the custom domain the user assigned to this storage account.
- encryption
EncryptionResponse 
- Encryption settings to be used for server-side encryption for the storage account.
- failoverIn BooleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- keyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- keyPolicy KeyPolicy Response 
- KeyPolicy assigned to the storage account.
- kind String
- Gets the Kind.
- lastGeo StringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- location String
- The geo-location where the resource lives
- name String
- The name of the resource
- networkRule NetworkSet Rule Set Response 
- Network rule set
- primaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation String
- Gets the location of the primary data center for the storage account.
- privateEndpoint List<PrivateConnections Endpoint Connection Response> 
- List of private endpoint connection associated with the specified storage account
- provisioningState String
- Gets the status of the storage account at the time the operation was called.
- sasPolicy SasPolicy Response 
- SasPolicy assigned to the storage account.
- secondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation String
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- sku
SkuResponse 
- Gets the SKU.
- statusOf StringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf StringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- allowBlob BooleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross BooleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- Boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy StringScope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles AzureIdentity Based Authentication Files Identity Based Authentication Response 
- Provides the identity based authentication settings for Azure Files.
- defaultTo BooleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint StringType 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps BooleanTraffic Only 
- Allows https traffic only to storage service if sets to true.
- enableNfs BooleanV3 
- NFS 3.0 protocol support enabled if set to true.
- extendedLocation ExtendedLocation Response 
- The extendedLocation of the resource.
- identity
IdentityResponse 
- The identity of the resource.
- immutableStorage ImmutableWith Versioning Storage Account Response 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- isHns BooleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal BooleanUser Enabled 
- Enables local users feature, if set to true
- isSftp BooleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- String
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- minimumTls StringVersion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- publicNetwork StringAccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference RoutingPreference Response 
- Maintains information about the network routing choice opted by the user for data transfer
- storageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- Map<String,String>
- Resource tags.
- accessTier string
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- blobRestore BlobStatus Restore Status Response 
- Blob restore status
- creationTime string
- Gets the creation date and time of the storage account in UTC.
- customDomain CustomDomain Response 
- Gets the custom domain the user assigned to this storage account.
- encryption
EncryptionResponse 
- Encryption settings to be used for server-side encryption for the storage account.
- failoverIn booleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- keyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- keyPolicy KeyPolicy Response 
- KeyPolicy assigned to the storage account.
- kind string
- Gets the Kind.
- lastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- location string
- The geo-location where the resource lives
- name string
- The name of the resource
- networkRule NetworkSet Rule Set Response 
- Network rule set
- primaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation string
- Gets the location of the primary data center for the storage account.
- privateEndpoint PrivateConnections Endpoint Connection Response[] 
- List of private endpoint connection associated with the specified storage account
- provisioningState string
- Gets the status of the storage account at the time the operation was called.
- sasPolicy SasPolicy Response 
- SasPolicy assigned to the storage account.
- secondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- sku
SkuResponse 
- Gets the SKU.
- statusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- allowBlob booleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross booleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy stringScope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles AzureIdentity Based Authentication Files Identity Based Authentication Response 
- Provides the identity based authentication settings for Azure Files.
- defaultTo booleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint stringType 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps booleanTraffic Only 
- Allows https traffic only to storage service if sets to true.
- enableNfs booleanV3 
- NFS 3.0 protocol support enabled if set to true.
- extendedLocation ExtendedLocation Response 
- The extendedLocation of the resource.
- identity
IdentityResponse 
- The identity of the resource.
- immutableStorage ImmutableWith Versioning Storage Account Response 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- isHns booleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal booleanUser Enabled 
- Enables local users feature, if set to true
- isSftp booleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- string
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- minimumTls stringVersion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- publicNetwork stringAccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference RoutingPreference Response 
- Maintains information about the network routing choice opted by the user for data transfer
- storageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- {[key: string]: string}
- Resource tags.
- access_tier str
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- blob_restore_ Blobstatus Restore Status Response 
- Blob restore status
- creation_time str
- Gets the creation date and time of the storage account in UTC.
- custom_domain CustomDomain Response 
- Gets the custom domain the user assigned to this storage account.
- encryption
EncryptionResponse 
- Encryption settings to be used for server-side encryption for the storage account.
- failover_in_ boolprogress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geo_replication_ Geostats Replication Stats Response 
- Geo Replication Stats
- id str
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- key_creation_ Keytime Creation Time Response 
- Storage account keys creation time.
- key_policy KeyPolicy Response 
- KeyPolicy assigned to the storage account.
- kind str
- Gets the Kind.
- last_geo_ strfailover_ time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- location str
- The geo-location where the resource lives
- name str
- The name of the resource
- network_rule_ Networkset Rule Set Response 
- Network rule set
- primary_endpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primary_location str
- Gets the location of the primary data center for the storage account.
- private_endpoint_ Sequence[Privateconnections Endpoint Connection Response] 
- List of private endpoint connection associated with the specified storage account
- provisioning_state str
- Gets the status of the storage account at the time the operation was called.
- sas_policy SasPolicy Response 
- SasPolicy assigned to the storage account.
- secondary_endpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondary_location str
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- sku
SkuResponse 
- Gets the SKU.
- status_of_ strprimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- status_of_ strsecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- allow_blob_ boolpublic_ access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allow_cross_ booltenant_ replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowed_copy_ strscope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azure_files_ Azureidentity_ based_ authentication Files Identity Based Authentication Response 
- Provides the identity based authentication settings for Azure Files.
- default_to_ boolo_ auth_ authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dns_endpoint_ strtype 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enable_https_ booltraffic_ only 
- Allows https traffic only to storage service if sets to true.
- enable_nfs_ boolv3 
- NFS 3.0 protocol support enabled if set to true.
- extended_location ExtendedLocation Response 
- The extendedLocation of the resource.
- identity
IdentityResponse 
- The identity of the resource.
- immutable_storage_ Immutablewith_ versioning Storage Account Response 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- is_hns_ boolenabled 
- Account HierarchicalNamespace enabled if sets to true.
- is_local_ booluser_ enabled 
- Enables local users feature, if set to true
- is_sftp_ boolenabled 
- Enables Secure File Transfer Protocol, if set to true
- str
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- minimum_tls_ strversion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- public_network_ straccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routing_preference RoutingPreference Response 
- Maintains information about the network routing choice opted by the user for data transfer
- storage_account_ Storagesku_ conversion_ status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- Mapping[str, str]
- Resource tags.
- accessTier String
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- blobRestore Property MapStatus 
- Blob restore status
- creationTime String
- Gets the creation date and time of the storage account in UTC.
- customDomain Property Map
- Gets the custom domain the user assigned to this storage account.
- encryption Property Map
- Encryption settings to be used for server-side encryption for the storage account.
- failoverIn BooleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication Property MapStats 
- Geo Replication Stats
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- keyCreation Property MapTime 
- Storage account keys creation time.
- keyPolicy Property Map
- KeyPolicy assigned to the storage account.
- kind String
- Gets the Kind.
- lastGeo StringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- location String
- The geo-location where the resource lives
- name String
- The name of the resource
- networkRule Property MapSet 
- Network rule set
- primaryEndpoints Property Map
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation String
- Gets the location of the primary data center for the storage account.
- privateEndpoint List<Property Map>Connections 
- List of private endpoint connection associated with the specified storage account
- provisioningState String
- Gets the status of the storage account at the time the operation was called.
- sasPolicy Property Map
- SasPolicy assigned to the storage account.
- secondaryEndpoints Property Map
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation String
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- sku Property Map
- Gets the SKU.
- statusOf StringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf StringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- allowBlob BooleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross BooleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- Boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy StringScope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles Property MapIdentity Based Authentication 
- Provides the identity based authentication settings for Azure Files.
- defaultTo BooleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint StringType 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps BooleanTraffic Only 
- Allows https traffic only to storage service if sets to true.
- enableNfs BooleanV3 
- NFS 3.0 protocol support enabled if set to true.
- extendedLocation Property Map
- The extendedLocation of the resource.
- identity Property Map
- The identity of the resource.
- immutableStorage Property MapWith Versioning 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the containers in the account by default.
- isHns BooleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal BooleanUser Enabled 
- Enables local users feature, if set to true
- isSftp BooleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- String
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- minimumTls StringVersion 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- publicNetwork StringAccess 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference Property Map
- Maintains information about the network routing choice opted by the user for data transfer
- storageAccount Property MapSku Conversion Status 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- Map<String>
- Resource tags.
Supporting Types
AccountImmutabilityPolicyPropertiesResponse    
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod IntegerSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state String
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected booleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod numberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allow_protected_ boolappend_ writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutability_period_ intsince_ creation_ in_ days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state str
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod NumberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state String
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
ActiveDirectoryPropertiesResponse   
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid string
- Specifies the domain GUID.
- domainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType string
- Specifies the Active Directory account type for Azure Storage.
- azureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid string
- Specifies the security identifier (SID).
- forestName string
- Specifies the Active Directory forest to get.
- netBios stringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domain_guid str
- Specifies the domain GUID.
- domain_name str
- Specifies the primary domain that the AD DNS server is authoritative for.
- account_type str
- Specifies the Active Directory account type for Azure Storage.
- azure_storage_ strsid 
- Specifies the security identifier (SID) for Azure Storage.
- domain_sid str
- Specifies the security identifier (SID).
- forest_name str
- Specifies the Active Directory forest to get.
- net_bios_ strdomain_ name 
- Specifies the NetBIOS domain name.
- sam_account_ strname 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
AzureFilesIdentityBasedAuthenticationResponse     
- DirectoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory Pulumi.Properties Azure Native. Storage. Inputs. Active Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- DirectoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService StringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- String
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directory_service_ stroptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- active_directory_ Activeproperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- str
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService StringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory Property MapProperties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- String
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
BlobRestoreParametersResponse   
- BlobRanges List<Pulumi.Azure Native. Storage. Inputs. Blob Restore Range Response> 
- Blob ranges to restore.
- TimeTo stringRestore 
- Restore blob to the specified time.
- BlobRanges []BlobRestore Range Response 
- Blob ranges to restore.
- TimeTo stringRestore 
- Restore blob to the specified time.
- blobRanges List<BlobRestore Range Response> 
- Blob ranges to restore.
- timeTo StringRestore 
- Restore blob to the specified time.
- blobRanges BlobRestore Range Response[] 
- Blob ranges to restore.
- timeTo stringRestore 
- Restore blob to the specified time.
- blob_ranges Sequence[BlobRestore Range Response] 
- Blob ranges to restore.
- time_to_ strrestore 
- Restore blob to the specified time.
- blobRanges List<Property Map>
- Blob ranges to restore.
- timeTo StringRestore 
- Restore blob to the specified time.
BlobRestoreRangeResponse   
- EndRange string
- Blob end range. This is exclusive. Empty means account end.
- StartRange string
- Blob start range. This is inclusive. Empty means account start.
- EndRange string
- Blob end range. This is exclusive. Empty means account end.
- StartRange string
- Blob start range. This is inclusive. Empty means account start.
- endRange String
- Blob end range. This is exclusive. Empty means account end.
- startRange String
- Blob start range. This is inclusive. Empty means account start.
- endRange string
- Blob end range. This is exclusive. Empty means account end.
- startRange string
- Blob start range. This is inclusive. Empty means account start.
- end_range str
- Blob end range. This is exclusive. Empty means account end.
- start_range str
- Blob start range. This is inclusive. Empty means account start.
- endRange String
- Blob end range. This is exclusive. Empty means account end.
- startRange String
- Blob start range. This is inclusive. Empty means account start.
BlobRestoreStatusResponse   
- FailureReason string
- Failure reason when blob restore is failed.
- Parameters
Pulumi.Azure Native. Storage. Inputs. Blob Restore Parameters Response 
- Blob restore request parameters.
- RestoreId string
- Id for tracking blob restore request.
- Status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- FailureReason string
- Failure reason when blob restore is failed.
- Parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- RestoreId string
- Id for tracking blob restore request.
- Status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason String
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restoreId String
- Id for tracking blob restore request.
- status String
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason string
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restoreId string
- Id for tracking blob restore request.
- status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failure_reason str
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restore_id str
- Id for tracking blob restore request.
- status str
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason String
- Failure reason when blob restore is failed.
- parameters Property Map
- Blob restore request parameters.
- restoreId String
- Id for tracking blob restore request.
- status String
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
CustomDomainResponse  
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub booleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name str
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- use_sub_ booldomain_ name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
EncryptionIdentityResponse  
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryption_federated_ stridentity_ client_ id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryption_user_ strassigned_ identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
EncryptionResponse 
- EncryptionIdentity Pulumi.Azure Native. Storage. Inputs. Encryption Identity Response 
- The identity to be used with service-side encryption at rest.
- KeySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault Pulumi.Properties Azure Native. Storage. Inputs. Key Vault Properties Response 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
Pulumi.Azure Native. Storage. Inputs. Encryption Services Response 
- List of services which support encryption.
- EncryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- KeySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- keySource String
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- keySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- requireInfrastructure booleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryption_identity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- key_source str
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- key_vault_ Keyproperties Vault Properties Response 
- Properties provided by key vault.
- require_infrastructure_ boolencryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity Property Map
- The identity to be used with service-side encryption at rest.
- keySource String
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault Property MapProperties 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services Property Map
- List of services which support encryption.
EncryptionServiceResponse  
- LastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- LastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled StringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- last_enabled_ strtime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- key_type str
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled StringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
EncryptionServicesResponse  
- Blob
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the blob storage service.
- File
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the file storage service.
- Queue
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the queue storage service.
- Table
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the table storage service.
- Blob
EncryptionService Response 
- The encryption function of the blob storage service.
- File
EncryptionService Response 
- The encryption function of the file storage service.
- Queue
EncryptionService Response 
- The encryption function of the queue storage service.
- Table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob Property Map
- The encryption function of the blob storage service.
- file Property Map
- The encryption function of the file storage service.
- queue Property Map
- The encryption function of the queue storage service.
- table Property Map
- The encryption function of the table storage service.
EndpointsResponse 
- Blob string
- Gets the blob endpoint.
- Dfs string
- Gets the dfs endpoint.
- File string
- Gets the file endpoint.
- Queue string
- Gets the queue endpoint.
- Table string
- Gets the table endpoint.
- Web string
- Gets the web endpoint.
- InternetEndpoints Pulumi.Azure Native. Storage. Inputs. Storage Account Internet Endpoints Response 
- Gets the internet routing storage endpoints
- MicrosoftEndpoints Pulumi.Azure Native. Storage. Inputs. Storage Account Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- Blob string
- Gets the blob endpoint.
- Dfs string
- Gets the dfs endpoint.
- File string
- Gets the file endpoint.
- Queue string
- Gets the queue endpoint.
- Table string
- Gets the table endpoint.
- Web string
- Gets the web endpoint.
- InternetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- MicrosoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob String
- Gets the blob endpoint.
- dfs String
- Gets the dfs endpoint.
- file String
- Gets the file endpoint.
- queue String
- Gets the queue endpoint.
- table String
- Gets the table endpoint.
- web String
- Gets the web endpoint.
- internetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob string
- Gets the blob endpoint.
- dfs string
- Gets the dfs endpoint.
- file string
- Gets the file endpoint.
- queue string
- Gets the queue endpoint.
- table string
- Gets the table endpoint.
- web string
- Gets the web endpoint.
- internetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob str
- Gets the blob endpoint.
- dfs str
- Gets the dfs endpoint.
- file str
- Gets the file endpoint.
- queue str
- Gets the queue endpoint.
- table str
- Gets the table endpoint.
- web str
- Gets the web endpoint.
- internet_endpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoft_endpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob String
- Gets the blob endpoint.
- dfs String
- Gets the dfs endpoint.
- file String
- Gets the file endpoint.
- queue String
- Gets the queue endpoint.
- table String
- Gets the table endpoint.
- web String
- Gets the web endpoint.
- internetEndpoints Property Map
- Gets the internet routing storage endpoints
- microsoftEndpoints Property Map
- Gets the microsoft routing storage endpoints.
ExtendedLocationResponse  
GeoReplicationStatsResponse   
- CanFailover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- LastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- Status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- CanFailover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- LastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- Status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover Boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync StringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status String
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- can_failover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- last_sync_ strtime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status str
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover Boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync StringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status String
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
IPRuleResponse 
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action string
- The action of IP ACL rule.
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action string
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action String
- The action of IP ACL rule.
- iPAddress stringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action string
- The action of IP ACL rule.
- i_p_ straddress_ or_ range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action str
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action String
- The action of IP ACL rule.
IdentityResponse 
- PrincipalId string
- The principal ID of resource identity.
- TenantId string
- The tenant ID of resource.
- Type string
- The identity type.
- UserAssigned Dictionary<string, Pulumi.Identities Azure Native. Storage. Inputs. User Assigned Identity Response> 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- PrincipalId string
- The principal ID of resource identity.
- TenantId string
- The tenant ID of resource.
- Type string
- The identity type.
- UserAssigned map[string]UserIdentities Assigned Identity Response 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId String
- The principal ID of resource identity.
- tenantId String
- The tenant ID of resource.
- type String
- The identity type.
- userAssigned Map<String,UserIdentities Assigned Identity Response> 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId string
- The principal ID of resource identity.
- tenantId string
- The tenant ID of resource.
- type string
- The identity type.
- userAssigned {[key: string]: UserIdentities Assigned Identity Response} 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principal_id str
- The principal ID of resource identity.
- tenant_id str
- The tenant ID of resource.
- type str
- The identity type.
- user_assigned_ Mapping[str, Useridentities Assigned Identity Response] 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId String
- The principal ID of resource identity.
- tenantId String
- The tenant ID of resource.
- type String
- The identity type.
- userAssigned Map<Property Map>Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
ImmutableStorageAccountResponse   
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy Pulumi.Azure Native. Storage. Inputs. Account Immutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutability_policy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy Property Map
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
KeyCreationTimeResponse   
KeyPolicyResponse  
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- keyExpiration IntegerPeriod In Days 
- The key expiration period in days.
- keyExpiration numberPeriod In Days 
- The key expiration period in days.
- key_expiration_ intperiod_ in_ days 
- The key expiration period in days.
- keyExpiration NumberPeriod In Days 
- The key expiration period in days.
KeyVaultPropertiesResponse   
- CurrentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- CurrentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- LastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- CurrentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- CurrentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- LastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- currentVersioned StringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned StringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey StringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
- currentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName string
- The name of KeyVault key.
- keyVault stringUri 
- The Uri of KeyVault.
- keyVersion string
- The version of KeyVault key.
- current_versioned_ strkey_ expiration_ timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- current_versioned_ strkey_ identifier 
- The object identifier of the current versioned Key Vault Key in use.
- last_key_ strrotation_ timestamp 
- Timestamp of last rotation of the Key Vault Key.
- key_name str
- The name of KeyVault key.
- key_vault_ struri 
- The Uri of KeyVault.
- key_version str
- The version of KeyVault key.
- currentVersioned StringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned StringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey StringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
NetworkRuleSetResponse   
- DefaultAction string
- Specifies the default action of allow or deny when no other rules match.
- Bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules List<Pulumi.Azure Native. Storage. Inputs. IPRule Response> 
- Sets the IP ACL rules
- ResourceAccess List<Pulumi.Rules Azure Native. Storage. Inputs. Resource Access Rule Response> 
- Sets the resource access rules
- VirtualNetwork List<Pulumi.Rules Azure Native. Storage. Inputs. Virtual Network Rule Response> 
- Sets the virtual network rules
- DefaultAction string
- Specifies the default action of allow or deny when no other rules match.
- Bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules []IPRuleResponse 
- Sets the IP ACL rules
- ResourceAccess []ResourceRules Access Rule Response 
- Sets the resource access rules
- VirtualNetwork []VirtualRules Network Rule Response 
- Sets the virtual network rules
- defaultAction String
- Specifies the default action of allow or deny when no other rules match.
- bypass String
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<IPRuleResponse> 
- Sets the IP ACL rules
- resourceAccess List<ResourceRules Access Rule Response> 
- Sets the resource access rules
- virtualNetwork List<VirtualRules Network Rule Response> 
- Sets the virtual network rules
- defaultAction string
- Specifies the default action of allow or deny when no other rules match.
- bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules IPRuleResponse[] 
- Sets the IP ACL rules
- resourceAccess ResourceRules Access Rule Response[] 
- Sets the resource access rules
- virtualNetwork VirtualRules Network Rule Response[] 
- Sets the virtual network rules
- default_action str
- Specifies the default action of allow or deny when no other rules match.
- bypass str
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ip_rules Sequence[IPRuleResponse] 
- Sets the IP ACL rules
- resource_access_ Sequence[Resourcerules Access Rule Response] 
- Sets the resource access rules
- virtual_network_ Sequence[Virtualrules Network Rule Response] 
- Sets the virtual network rules
- defaultAction String
- Specifies the default action of allow or deny when no other rules match.
- bypass String
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<Property Map>
- Sets the IP ACL rules
- resourceAccess List<Property Map>Rules 
- Sets the resource access rules
- virtualNetwork List<Property Map>Rules 
- Sets the virtual network rules
PrivateEndpointConnectionResponse   
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- Name string
- The name of the resource
- PrivateLink Pulumi.Service Connection State Azure Native. Storage. Inputs. Private Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- ProvisioningState string
- The provisioning state of the private endpoint connection resource.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- PrivateEndpoint Pulumi.Azure Native. Storage. Inputs. Private Endpoint Response 
- The resource of private end point.
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- Name string
- The name of the resource
- PrivateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- ProvisioningState string
- The provisioning state of the private endpoint connection resource.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- PrivateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name String
- The name of the resource
- privateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState String
- The provisioning state of the private endpoint connection resource.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name string
- The name of the resource
- privateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState string
- The provisioning state of the private endpoint connection resource.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id str
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name str
- The name of the resource
- private_link_ Privateservice_ connection_ state Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioning_state str
- The provisioning state of the private endpoint connection resource.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- private_endpoint PrivateEndpoint Response 
- The resource of private end point.
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name String
- The name of the resource
- privateLink Property MapService Connection State 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState String
- The provisioning state of the private endpoint connection resource.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint Property Map
- The resource of private end point.
PrivateEndpointResponse  
- Id string
- The ARM identifier for Private Endpoint
- Id string
- The ARM identifier for Private Endpoint
- id String
- The ARM identifier for Private Endpoint
- id string
- The ARM identifier for Private Endpoint
- id str
- The ARM identifier for Private Endpoint
- id String
- The ARM identifier for Private Endpoint
PrivateLinkServiceConnectionStateResponse     
- ActionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- Description string
- The reason for approval/rejection of the connection.
- Status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- ActionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- Description string
- The reason for approval/rejection of the connection.
- Status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired String
- A message indicating if changes on the service provider require any updates on the consumer.
- description String
- The reason for approval/rejection of the connection.
- status String
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- description string
- The reason for approval/rejection of the connection.
- status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- action_required str
- A message indicating if changes on the service provider require any updates on the consumer.
- description str
- The reason for approval/rejection of the connection.
- status str
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired String
- A message indicating if changes on the service provider require any updates on the consumer.
- description String
- The reason for approval/rejection of the connection.
- status String
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
ResourceAccessRuleResponse   
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
- resourceId string
- Resource Id
- tenantId string
- Tenant Id
- resource_id str
- Resource Id
- tenant_id str
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
RoutingPreferenceResponse  
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet booleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft booleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- publish_internet_ boolendpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publish_microsoft_ boolendpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routing_choice str
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String
- Routing Choice defines the kind of network routing opted by the user.
SasPolicyResponse  
- ExpirationAction string
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- ExpirationAction string
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction string
- The SAS expiration action. Can only be Log.
- sasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expiration_action str
- The SAS expiration action. Can only be Log.
- sas_expiration_ strperiod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
SkuResponse 
StorageAccountInternetEndpointsResponse    
StorageAccountMicrosoftEndpointsResponse    
StorageAccountSkuConversionStatusResponse     
- EndTime string
- This property represents the sku conversion end time.
- SkuConversion stringStatus 
- This property indicates the current sku conversion status.
- StartTime string
- This property represents the sku conversion start time.
- TargetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- EndTime string
- This property represents the sku conversion end time.
- SkuConversion stringStatus 
- This property indicates the current sku conversion status.
- StartTime string
- This property represents the sku conversion start time.
- TargetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime String
- This property represents the sku conversion end time.
- skuConversion StringStatus 
- This property indicates the current sku conversion status.
- startTime String
- This property represents the sku conversion start time.
- targetSku StringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime string
- This property represents the sku conversion end time.
- skuConversion stringStatus 
- This property indicates the current sku conversion status.
- startTime string
- This property represents the sku conversion start time.
- targetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- end_time str
- This property represents the sku conversion end time.
- sku_conversion_ strstatus 
- This property indicates the current sku conversion status.
- start_time str
- This property represents the sku conversion start time.
- target_sku_ strname 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime String
- This property represents the sku conversion end time.
- skuConversion StringStatus 
- This property indicates the current sku conversion status.
- startTime String
- This property represents the sku conversion start time.
- targetSku StringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
UserAssignedIdentityResponse   
- ClientId string
- The client ID of the identity.
- PrincipalId string
- The principal ID of the identity.
- ClientId string
- The client ID of the identity.
- PrincipalId string
- The principal ID of the identity.
- clientId String
- The client ID of the identity.
- principalId String
- The principal ID of the identity.
- clientId string
- The client ID of the identity.
- principalId string
- The principal ID of the identity.
- client_id str
- The client ID of the identity.
- principal_id str
- The principal ID of the identity.
- clientId String
- The client ID of the identity.
- principalId String
- The principal ID of the identity.
VirtualNetworkRuleResponse   
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action string
- The action of virtual network rule.
- State string
- Gets the state of virtual network rule.
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action string
- The action of virtual network rule.
- State string
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action String
- The action of virtual network rule.
- state String
- Gets the state of virtual network rule.
- virtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action string
- The action of virtual network rule.
- state string
- Gets the state of virtual network rule.
- virtual_network_ strresource_ id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action str
- The action of virtual network rule.
- state str
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action String
- The action of virtual network rule.
- state String
- Gets the state of virtual network rule.
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0
This is the latest version of Azure Native. Use the Azure Native v1 docs if using the v1 version of this package.
Azure Native v2.89.1 published on Sunday, Mar 2, 2025 by Pulumi