azure-native.storage.StorageAccount
Explore with Pulumi AI
The storage account. Azure REST API version: 2022-09-01. Prior API version in Azure Native 1.x: 2021-02-01.
Other available API versions: 2023-01-01, 2023-04-01, 2023-05-01, 2024-01-01.
Example Usage
NfsV3AccountCreate
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        EnableHttpsTrafficOnly = false,
        EnableNfsV3 = true,
        IsHnsEnabled = true,
        Kind = AzureNative.Storage.Kind.BlockBlobStorage,
        Location = "eastus",
        NetworkRuleSet = new AzureNative.Storage.Inputs.NetworkRuleSetArgs
        {
            Bypass = AzureNative.Storage.Bypass.AzureServices,
            DefaultAction = AzureNative.Storage.DefaultAction.Allow,
            IpRules = new() { },
            VirtualNetworkRules = new[]
            {
                new AzureNative.Storage.Inputs.VirtualNetworkRuleArgs
                {
                    VirtualNetworkResourceId = "/subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12",
                },
            },
        },
        ResourceGroupName = "res9101",
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Premium_LRS,
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:            pulumi.String("sto4445"),
			EnableHttpsTrafficOnly: pulumi.Bool(false),
			EnableNfsV3:            pulumi.Bool(true),
			IsHnsEnabled:           pulumi.Bool(true),
			Kind:                   pulumi.String(storage.KindBlockBlobStorage),
			Location:               pulumi.String("eastus"),
			NetworkRuleSet: &storage.NetworkRuleSetArgs{
				Bypass:        pulumi.String(storage.BypassAzureServices),
				DefaultAction: storage.DefaultActionAllow,
				IpRules:       storage.IPRuleArray{},
				VirtualNetworkRules: storage.VirtualNetworkRuleArray{
					&storage.VirtualNetworkRuleArgs{
						VirtualNetworkResourceId: pulumi.String("/subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12"),
					},
				},
			},
			ResourceGroupName: pulumi.String("res9101"),
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Premium_LRS),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.NetworkRuleSetArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .enableHttpsTrafficOnly(false)
            .enableNfsV3(true)
            .isHnsEnabled(true)
            .kind("BlockBlobStorage")
            .location("eastus")
            .networkRuleSet(NetworkRuleSetArgs.builder()
                .bypass("AzureServices")
                .defaultAction("Allow")
                .ipRules()
                .virtualNetworkRules(VirtualNetworkRuleArgs.builder()
                    .virtualNetworkResourceId("/subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12")
                    .build())
                .build())
            .resourceGroupName("res9101")
            .sku(SkuArgs.builder()
                .name("Premium_LRS")
                .build())
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    enableHttpsTrafficOnly: false,
    enableNfsV3: true,
    isHnsEnabled: true,
    kind: azure_native.storage.Kind.BlockBlobStorage,
    location: "eastus",
    networkRuleSet: {
        bypass: azure_native.storage.Bypass.AzureServices,
        defaultAction: azure_native.storage.DefaultAction.Allow,
        ipRules: [],
        virtualNetworkRules: [{
            virtualNetworkResourceId: "/subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12",
        }],
    },
    resourceGroupName: "res9101",
    sku: {
        name: azure_native.storage.SkuName.Premium_LRS,
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    enable_https_traffic_only=False,
    enable_nfs_v3=True,
    is_hns_enabled=True,
    kind=azure_native.storage.Kind.BLOCK_BLOB_STORAGE,
    location="eastus",
    network_rule_set={
        "bypass": azure_native.storage.Bypass.AZURE_SERVICES,
        "default_action": azure_native.storage.DefaultAction.ALLOW,
        "ip_rules": [],
        "virtual_network_rules": [{
            "virtual_network_resource_id": "/subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12",
        }],
    },
    resource_group_name="res9101",
    sku={
        "name": azure_native.storage.SkuName.PREMIUM_LRS,
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      enableHttpsTrafficOnly: false
      enableNfsV3: true
      isHnsEnabled: true
      kind: BlockBlobStorage
      location: eastus
      networkRuleSet:
        bypass: AzureServices
        defaultAction: Allow
        ipRules: []
        virtualNetworkRules:
          - virtualNetworkResourceId: /subscriptions/{subscription-id}/resourceGroups/res9101/providers/Microsoft.Network/virtualNetworks/net123/subnets/subnet12
      resourceGroupName: res9101
      sku:
        name: Premium_LRS
StorageAccountCreate
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        DefaultToOAuthAuthentication = false,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        IsHnsEnabled = true,
        IsSftpEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:                  pulumi.String("sto4445"),
			AllowBlobPublicAccess:        pulumi.Bool(false),
			AllowSharedKeyAccess:         pulumi.Bool(true),
			DefaultToOAuthAuthentication: pulumi.Bool(false),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			IsHnsEnabled:  pulumi.Bool(true),
			IsSftpEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .defaultToOAuthAuthentication(false)
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .isHnsEnabled(true)
            .isSftpEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    defaultToOAuthAuthentication: false,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    isHnsEnabled: true,
    isSftpEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    default_to_o_auth_authentication=False,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    is_hns_enabled=True,
    is_sftp_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      defaultToOAuthAuthentication: false
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      isHnsEnabled: true
      isSftpEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateAllowedCopyScopeToAAD
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        AllowedCopyScope = AzureNative.Storage.AllowedCopyScope.AAD,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        IsHnsEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:           pulumi.String("sto4445"),
			AllowBlobPublicAccess: pulumi.Bool(false),
			AllowSharedKeyAccess:  pulumi.Bool(true),
			AllowedCopyScope:      pulumi.String(storage.AllowedCopyScopeAAD),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			IsHnsEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .allowedCopyScope("AAD")
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .isHnsEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    allowedCopyScope: azure_native.storage.AllowedCopyScope.AAD,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    isHnsEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    allowed_copy_scope=azure_native.storage.AllowedCopyScope.AAD,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    is_hns_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      allowedCopyScope: AAD
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      isHnsEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateAllowedCopyScopeToPrivateLink
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        AllowedCopyScope = AzureNative.Storage.AllowedCopyScope.PrivateLink,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        IsHnsEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:           pulumi.String("sto4445"),
			AllowBlobPublicAccess: pulumi.Bool(false),
			AllowSharedKeyAccess:  pulumi.Bool(true),
			AllowedCopyScope:      pulumi.String(storage.AllowedCopyScopePrivateLink),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			IsHnsEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .allowedCopyScope("PrivateLink")
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .isHnsEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    allowedCopyScope: azure_native.storage.AllowedCopyScope.PrivateLink,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    isHnsEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    allowed_copy_scope=azure_native.storage.AllowedCopyScope.PRIVATE_LINK,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    is_hns_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      allowedCopyScope: PrivateLink
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      isHnsEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateDisallowPublicNetworkAccess
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        IsHnsEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        PublicNetworkAccess = AzureNative.Storage.PublicNetworkAccess.Disabled,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:           pulumi.String("sto4445"),
			AllowBlobPublicAccess: pulumi.Bool(false),
			AllowSharedKeyAccess:  pulumi.Bool(true),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			IsHnsEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:                pulumi.String(storage.KindStorage),
			Location:            pulumi.String("eastus"),
			MinimumTlsVersion:   pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			PublicNetworkAccess: pulumi.String(storage.PublicNetworkAccessDisabled),
			ResourceGroupName:   pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .isHnsEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .publicNetworkAccess("Disabled")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    isHnsEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    publicNetworkAccess: azure_native.storage.PublicNetworkAccess.Disabled,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    is_hns_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    public_network_access=azure_native.storage.PublicNetworkAccess.DISABLED,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      isHnsEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      publicNetworkAccess: Disabled
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateDnsEndpointTypeToAzureDnsZone
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        DefaultToOAuthAuthentication = false,
        DnsEndpointType = AzureNative.Storage.DnsEndpointType.AzureDnsZone,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        IsHnsEnabled = true,
        IsSftpEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:                  pulumi.String("sto4445"),
			AllowBlobPublicAccess:        pulumi.Bool(false),
			AllowSharedKeyAccess:         pulumi.Bool(true),
			DefaultToOAuthAuthentication: pulumi.Bool(false),
			DnsEndpointType:              pulumi.String(storage.DnsEndpointTypeAzureDnsZone),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			IsHnsEnabled:  pulumi.Bool(true),
			IsSftpEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .defaultToOAuthAuthentication(false)
            .dnsEndpointType("AzureDnsZone")
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .isHnsEnabled(true)
            .isSftpEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    defaultToOAuthAuthentication: false,
    dnsEndpointType: azure_native.storage.DnsEndpointType.AzureDnsZone,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    isHnsEnabled: true,
    isSftpEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    default_to_o_auth_authentication=False,
    dns_endpoint_type=azure_native.storage.DnsEndpointType.AZURE_DNS_ZONE,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    is_hns_enabled=True,
    is_sftp_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      defaultToOAuthAuthentication: false
      dnsEndpointType: AzureDnsZone
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      isHnsEnabled: true
      isSftpEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateDnsEndpointTypeToStandard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        DefaultToOAuthAuthentication = false,
        DnsEndpointType = AzureNative.Storage.DnsEndpointType.Standard,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        IsHnsEnabled = true,
        IsSftpEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:                  pulumi.String("sto4445"),
			AllowBlobPublicAccess:        pulumi.Bool(false),
			AllowSharedKeyAccess:         pulumi.Bool(true),
			DefaultToOAuthAuthentication: pulumi.Bool(false),
			DnsEndpointType:              pulumi.String(storage.DnsEndpointTypeStandard),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			IsHnsEnabled:  pulumi.Bool(true),
			IsSftpEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .defaultToOAuthAuthentication(false)
            .dnsEndpointType("Standard")
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .isHnsEnabled(true)
            .isSftpEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    defaultToOAuthAuthentication: false,
    dnsEndpointType: azure_native.storage.DnsEndpointType.Standard,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    isHnsEnabled: true,
    isSftpEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    default_to_o_auth_authentication=False,
    dns_endpoint_type=azure_native.storage.DnsEndpointType.STANDARD,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    is_hns_enabled=True,
    is_sftp_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      defaultToOAuthAuthentication: false
      dnsEndpointType: Standard
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      isHnsEnabled: true
      isSftpEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateEnablePublicNetworkAccess
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowBlobPublicAccess = false,
        AllowSharedKeyAccess = true,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        IsHnsEnabled = true,
        KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
        {
            KeyExpirationPeriodInDays = 20,
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        PublicNetworkAccess = AzureNative.Storage.PublicNetworkAccess.Enabled,
        ResourceGroupName = "res9101",
        RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
        {
            PublishInternetEndpoints = true,
            PublishMicrosoftEndpoints = true,
            RoutingChoice = AzureNative.Storage.RoutingChoice.MicrosoftRouting,
        },
        SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
        {
            ExpirationAction = AzureNative.Storage.ExpirationAction.Log,
            SasExpirationPeriod = "1.15:59:59",
        },
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:           pulumi.String("sto4445"),
			AllowBlobPublicAccess: pulumi.Bool(false),
			AllowSharedKeyAccess:  pulumi.Bool(true),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			IsHnsEnabled: pulumi.Bool(true),
			KeyPolicy: &storage.KeyPolicyArgs{
				KeyExpirationPeriodInDays: pulumi.Int(20),
			},
			Kind:                pulumi.String(storage.KindStorage),
			Location:            pulumi.String("eastus"),
			MinimumTlsVersion:   pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			PublicNetworkAccess: pulumi.String(storage.PublicNetworkAccessEnabled),
			ResourceGroupName:   pulumi.String("res9101"),
			RoutingPreference: &storage.RoutingPreferenceArgs{
				PublishInternetEndpoints:  pulumi.Bool(true),
				PublishMicrosoftEndpoints: pulumi.Bool(true),
				RoutingChoice:             pulumi.String(storage.RoutingChoiceMicrosoftRouting),
			},
			SasPolicy: &storage.SasPolicyArgs{
				ExpirationAction:    pulumi.String(storage.ExpirationActionLog),
				SasExpirationPeriod: pulumi.String("1.15:59:59"),
			},
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.KeyPolicyArgs;
import com.pulumi.azurenative.storage.inputs.RoutingPreferenceArgs;
import com.pulumi.azurenative.storage.inputs.SasPolicyArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowBlobPublicAccess(false)
            .allowSharedKeyAccess(true)
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .isHnsEnabled(true)
            .keyPolicy(KeyPolicyArgs.builder()
                .keyExpirationPeriodInDays(20)
                .build())
            .kind("Storage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .publicNetworkAccess("Enabled")
            .resourceGroupName("res9101")
            .routingPreference(RoutingPreferenceArgs.builder()
                .publishInternetEndpoints(true)
                .publishMicrosoftEndpoints(true)
                .routingChoice("MicrosoftRouting")
                .build())
            .sasPolicy(SasPolicyArgs.builder()
                .expirationAction("Log")
                .sasExpirationPeriod("1.15:59:59")
                .build())
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowBlobPublicAccess: false,
    allowSharedKeyAccess: true,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    isHnsEnabled: true,
    keyPolicy: {
        keyExpirationPeriodInDays: 20,
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    publicNetworkAccess: azure_native.storage.PublicNetworkAccess.Enabled,
    resourceGroupName: "res9101",
    routingPreference: {
        publishInternetEndpoints: true,
        publishMicrosoftEndpoints: true,
        routingChoice: azure_native.storage.RoutingChoice.MicrosoftRouting,
    },
    sasPolicy: {
        expirationAction: azure_native.storage.ExpirationAction.Log,
        sasExpirationPeriod: "1.15:59:59",
    },
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_blob_public_access=False,
    allow_shared_key_access=True,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    is_hns_enabled=True,
    key_policy={
        "key_expiration_period_in_days": 20,
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    public_network_access=azure_native.storage.PublicNetworkAccess.ENABLED,
    resource_group_name="res9101",
    routing_preference={
        "publish_internet_endpoints": True,
        "publish_microsoft_endpoints": True,
        "routing_choice": azure_native.storage.RoutingChoice.MICROSOFT_ROUTING,
    },
    sas_policy={
        "expiration_action": azure_native.storage.ExpirationAction.LOG,
        "sas_expiration_period": "1.15:59:59",
    },
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowBlobPublicAccess: false
      allowSharedKeyAccess: true
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      isHnsEnabled: true
      keyPolicy:
        keyExpirationPeriodInDays: 20
      kind: Storage
      location: eastus
      minimumTlsVersion: TLS1_2
      publicNetworkAccess: Enabled
      resourceGroupName: res9101
      routingPreference:
        publishInternetEndpoints: true
        publishMicrosoftEndpoints: true
        routingChoice: MicrosoftRouting
      sasPolicy:
        expirationAction: Log
        sasExpirationPeriod: 1.15:59:59
      sku:
        name: Standard_GRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreatePremiumBlockBlobStorage
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        AllowSharedKeyAccess = true,
        Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
        {
            KeySource = AzureNative.Storage.KeySource.Microsoft_Storage,
            RequireInfrastructureEncryption = false,
            Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
            {
                Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
                File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
                {
                    Enabled = true,
                    KeyType = AzureNative.Storage.KeyType.Account,
                },
            },
        },
        Kind = AzureNative.Storage.Kind.BlockBlobStorage,
        Location = "eastus",
        MinimumTlsVersion = AzureNative.Storage.MinimumTlsVersion.TLS1_2,
        ResourceGroupName = "res9101",
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Premium_LRS,
        },
        Tags = 
        {
            { "key1", "value1" },
            { "key2", "value2" },
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName:          pulumi.String("sto4445"),
			AllowSharedKeyAccess: pulumi.Bool(true),
			Encryption: &storage.EncryptionArgs{
				KeySource:                       pulumi.String(storage.KeySource_Microsoft_Storage),
				RequireInfrastructureEncryption: pulumi.Bool(false),
				Services: &storage.EncryptionServicesArgs{
					Blob: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
					File: &storage.EncryptionServiceArgs{
						Enabled: pulumi.Bool(true),
						KeyType: pulumi.String(storage.KeyTypeAccount),
					},
				},
			},
			Kind:              pulumi.String(storage.KindBlockBlobStorage),
			Location:          pulumi.String("eastus"),
			MinimumTlsVersion: pulumi.String(storage.MinimumTlsVersion_TLS1_2),
			ResourceGroupName: pulumi.String("res9101"),
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Premium_LRS),
			},
			Tags: pulumi.StringMap{
				"key1": pulumi.String("value1"),
				"key2": pulumi.String("value2"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServicesArgs;
import com.pulumi.azurenative.storage.inputs.EncryptionServiceArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .allowSharedKeyAccess(true)
            .encryption(EncryptionArgs.builder()
                .keySource("Microsoft.Storage")
                .requireInfrastructureEncryption(false)
                .services(EncryptionServicesArgs.builder()
                    .blob(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .file(EncryptionServiceArgs.builder()
                        .enabled(true)
                        .keyType("Account")
                        .build())
                    .build())
                .build())
            .kind("BlockBlobStorage")
            .location("eastus")
            .minimumTlsVersion("TLS1_2")
            .resourceGroupName("res9101")
            .sku(SkuArgs.builder()
                .name("Premium_LRS")
                .build())
            .tags(Map.ofEntries(
                Map.entry("key1", "value1"),
                Map.entry("key2", "value2")
            ))
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    allowSharedKeyAccess: true,
    encryption: {
        keySource: azure_native.storage.KeySource.Microsoft_Storage,
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
            file: {
                enabled: true,
                keyType: azure_native.storage.KeyType.Account,
            },
        },
    },
    kind: azure_native.storage.Kind.BlockBlobStorage,
    location: "eastus",
    minimumTlsVersion: azure_native.storage.MinimumTlsVersion.TLS1_2,
    resourceGroupName: "res9101",
    sku: {
        name: azure_native.storage.SkuName.Premium_LRS,
    },
    tags: {
        key1: "value1",
        key2: "value2",
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    allow_shared_key_access=True,
    encryption={
        "key_source": azure_native.storage.KeySource.MICROSOFT_STORAGE,
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
            "file": {
                "enabled": True,
                "key_type": azure_native.storage.KeyType.ACCOUNT,
            },
        },
    },
    kind=azure_native.storage.Kind.BLOCK_BLOB_STORAGE,
    location="eastus",
    minimum_tls_version=azure_native.storage.MinimumTlsVersion.TLS1_2,
    resource_group_name="res9101",
    sku={
        "name": azure_native.storage.SkuName.PREMIUM_LRS,
    },
    tags={
        "key1": "value1",
        "key2": "value2",
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      allowSharedKeyAccess: true
      encryption:
        keySource: Microsoft.Storage
        requireInfrastructureEncryption: false
        services:
          blob:
            enabled: true
            keyType: Account
          file:
            enabled: true
            keyType: Account
      kind: BlockBlobStorage
      location: eastus
      minimumTlsVersion: TLS1_2
      resourceGroupName: res9101
      sku:
        name: Premium_LRS
      tags:
        key1: value1
        key2: value2
StorageAccountCreateWithImmutabilityPolicy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var storageAccount = new AzureNative.Storage.StorageAccount("storageAccount", new()
    {
        AccountName = "sto4445",
        ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
        {
            Name = "losangeles001",
            Type = AzureNative.Storage.ExtendedLocationTypes.EdgeZone,
        },
        ImmutableStorageWithVersioning = new AzureNative.Storage.Inputs.ImmutableStorageAccountArgs
        {
            Enabled = true,
            ImmutabilityPolicy = new AzureNative.Storage.Inputs.AccountImmutabilityPolicyPropertiesArgs
            {
                AllowProtectedAppendWrites = true,
                ImmutabilityPeriodSinceCreationInDays = 15,
                State = AzureNative.Storage.AccountImmutabilityPolicyState.Unlocked,
            },
        },
        Kind = AzureNative.Storage.Kind.Storage,
        Location = "eastus",
        ResourceGroupName = "res9101",
        Sku = new AzureNative.Storage.Inputs.SkuArgs
        {
            Name = AzureNative.Storage.SkuName.Standard_GRS,
        },
    });
});
package main
import (
	storage "github.com/pulumi/pulumi-azure-native-sdk/storage/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := storage.NewStorageAccount(ctx, "storageAccount", &storage.StorageAccountArgs{
			AccountName: pulumi.String("sto4445"),
			ExtendedLocation: &storage.ExtendedLocationArgs{
				Name: pulumi.String("losangeles001"),
				Type: pulumi.String(storage.ExtendedLocationTypesEdgeZone),
			},
			ImmutableStorageWithVersioning: &storage.ImmutableStorageAccountArgs{
				Enabled: pulumi.Bool(true),
				ImmutabilityPolicy: &storage.AccountImmutabilityPolicyPropertiesArgs{
					AllowProtectedAppendWrites:            pulumi.Bool(true),
					ImmutabilityPeriodSinceCreationInDays: pulumi.Int(15),
					State:                                 pulumi.String(storage.AccountImmutabilityPolicyStateUnlocked),
				},
			},
			Kind:              pulumi.String(storage.KindStorage),
			Location:          pulumi.String("eastus"),
			ResourceGroupName: pulumi.String("res9101"),
			Sku: &storage.SkuArgs{
				Name: pulumi.String(storage.SkuName_Standard_GRS),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.storage.StorageAccount;
import com.pulumi.azurenative.storage.StorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.ExtendedLocationArgs;
import com.pulumi.azurenative.storage.inputs.ImmutableStorageAccountArgs;
import com.pulumi.azurenative.storage.inputs.AccountImmutabilityPolicyPropertiesArgs;
import com.pulumi.azurenative.storage.inputs.SkuArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var storageAccount = new StorageAccount("storageAccount", StorageAccountArgs.builder()
            .accountName("sto4445")
            .extendedLocation(ExtendedLocationArgs.builder()
                .name("losangeles001")
                .type("EdgeZone")
                .build())
            .immutableStorageWithVersioning(ImmutableStorageAccountArgs.builder()
                .enabled(true)
                .immutabilityPolicy(AccountImmutabilityPolicyPropertiesArgs.builder()
                    .allowProtectedAppendWrites(true)
                    .immutabilityPeriodSinceCreationInDays(15)
                    .state("Unlocked")
                    .build())
                .build())
            .kind("Storage")
            .location("eastus")
            .resourceGroupName("res9101")
            .sku(SkuArgs.builder()
                .name("Standard_GRS")
                .build())
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const storageAccount = new azure_native.storage.StorageAccount("storageAccount", {
    accountName: "sto4445",
    extendedLocation: {
        name: "losangeles001",
        type: azure_native.storage.ExtendedLocationTypes.EdgeZone,
    },
    immutableStorageWithVersioning: {
        enabled: true,
        immutabilityPolicy: {
            allowProtectedAppendWrites: true,
            immutabilityPeriodSinceCreationInDays: 15,
            state: azure_native.storage.AccountImmutabilityPolicyState.Unlocked,
        },
    },
    kind: azure_native.storage.Kind.Storage,
    location: "eastus",
    resourceGroupName: "res9101",
    sku: {
        name: azure_native.storage.SkuName.Standard_GRS,
    },
});
import pulumi
import pulumi_azure_native as azure_native
storage_account = azure_native.storage.StorageAccount("storageAccount",
    account_name="sto4445",
    extended_location={
        "name": "losangeles001",
        "type": azure_native.storage.ExtendedLocationTypes.EDGE_ZONE,
    },
    immutable_storage_with_versioning={
        "enabled": True,
        "immutability_policy": {
            "allow_protected_append_writes": True,
            "immutability_period_since_creation_in_days": 15,
            "state": azure_native.storage.AccountImmutabilityPolicyState.UNLOCKED,
        },
    },
    kind=azure_native.storage.Kind.STORAGE,
    location="eastus",
    resource_group_name="res9101",
    sku={
        "name": azure_native.storage.SkuName.STANDARD_GRS,
    })
resources:
  storageAccount:
    type: azure-native:storage:StorageAccount
    properties:
      accountName: sto4445
      extendedLocation:
        name: losangeles001
        type: EdgeZone
      immutableStorageWithVersioning:
        enabled: true
        immutabilityPolicy:
          allowProtectedAppendWrites: true
          immutabilityPeriodSinceCreationInDays: 15
          state: Unlocked
      kind: Storage
      location: eastus
      resourceGroupName: res9101
      sku:
        name: Standard_GRS
Create StorageAccount Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new StorageAccount(name: string, args: StorageAccountArgs, opts?: CustomResourceOptions);@overload
def StorageAccount(resource_name: str,
                   args: StorageAccountArgs,
                   opts: Optional[ResourceOptions] = None)
@overload
def StorageAccount(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   kind: Optional[Union[str, Kind]] = None,
                   sku: Optional[SkuArgs] = None,
                   resource_group_name: Optional[str] = None,
                   identity: Optional[IdentityArgs] = None,
                   is_hns_enabled: Optional[bool] = None,
                   allowed_copy_scope: Optional[Union[str, AllowedCopyScope]] = None,
                   azure_files_identity_based_authentication: Optional[AzureFilesIdentityBasedAuthenticationArgs] = None,
                   custom_domain: Optional[CustomDomainArgs] = None,
                   default_to_o_auth_authentication: Optional[bool] = None,
                   dns_endpoint_type: Optional[Union[str, DnsEndpointType]] = None,
                   enable_https_traffic_only: Optional[bool] = None,
                   enable_nfs_v3: Optional[bool] = None,
                   encryption: Optional[EncryptionArgs] = None,
                   extended_location: Optional[ExtendedLocationArgs] = None,
                   access_tier: Optional[AccessTier] = None,
                   immutable_storage_with_versioning: Optional[ImmutableStorageAccountArgs] = None,
                   allow_shared_key_access: Optional[bool] = None,
                   is_local_user_enabled: Optional[bool] = None,
                   is_sftp_enabled: Optional[bool] = None,
                   key_policy: Optional[KeyPolicyArgs] = None,
                   allow_cross_tenant_replication: Optional[bool] = None,
                   large_file_shares_state: Optional[Union[str, LargeFileSharesState]] = None,
                   location: Optional[str] = None,
                   minimum_tls_version: Optional[Union[str, MinimumTlsVersion]] = None,
                   network_rule_set: Optional[NetworkRuleSetArgs] = None,
                   public_network_access: Optional[Union[str, PublicNetworkAccess]] = None,
                   allow_blob_public_access: Optional[bool] = None,
                   routing_preference: Optional[RoutingPreferenceArgs] = None,
                   sas_policy: Optional[SasPolicyArgs] = None,
                   account_name: Optional[str] = None,
                   tags: Optional[Mapping[str, str]] = None)func NewStorageAccount(ctx *Context, name string, args StorageAccountArgs, opts ...ResourceOption) (*StorageAccount, error)public StorageAccount(string name, StorageAccountArgs args, CustomResourceOptions? opts = null)
public StorageAccount(String name, StorageAccountArgs args)
public StorageAccount(String name, StorageAccountArgs args, CustomResourceOptions options)
type: azure-native:storage:StorageAccount
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args StorageAccountArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args StorageAccountArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args StorageAccountArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args StorageAccountArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args StorageAccountArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var azure_nativeStorageAccountResource = new AzureNative.Storage.StorageAccount("azure-nativeStorageAccountResource", new()
{
    Kind = "string",
    Sku = new AzureNative.Storage.Inputs.SkuArgs
    {
        Name = "string",
    },
    ResourceGroupName = "string",
    Identity = new AzureNative.Storage.Inputs.IdentityArgs
    {
        Type = "string",
        UserAssignedIdentities = new[]
        {
            "string",
        },
    },
    IsHnsEnabled = false,
    AllowedCopyScope = "string",
    AzureFilesIdentityBasedAuthentication = new AzureNative.Storage.Inputs.AzureFilesIdentityBasedAuthenticationArgs
    {
        DirectoryServiceOptions = "string",
        ActiveDirectoryProperties = new AzureNative.Storage.Inputs.ActiveDirectoryPropertiesArgs
        {
            DomainGuid = "string",
            DomainName = "string",
            AccountType = "string",
            AzureStorageSid = "string",
            DomainSid = "string",
            ForestName = "string",
            NetBiosDomainName = "string",
            SamAccountName = "string",
        },
        DefaultSharePermission = "string",
    },
    CustomDomain = new AzureNative.Storage.Inputs.CustomDomainArgs
    {
        Name = "string",
        UseSubDomainName = false,
    },
    DefaultToOAuthAuthentication = false,
    DnsEndpointType = "string",
    EnableHttpsTrafficOnly = false,
    EnableNfsV3 = false,
    Encryption = new AzureNative.Storage.Inputs.EncryptionArgs
    {
        EncryptionIdentity = new AzureNative.Storage.Inputs.EncryptionIdentityArgs
        {
            EncryptionFederatedIdentityClientId = "string",
            EncryptionUserAssignedIdentity = "string",
        },
        KeySource = "string",
        KeyVaultProperties = new AzureNative.Storage.Inputs.KeyVaultPropertiesArgs
        {
            KeyName = "string",
            KeyVaultUri = "string",
            KeyVersion = "string",
        },
        RequireInfrastructureEncryption = false,
        Services = new AzureNative.Storage.Inputs.EncryptionServicesArgs
        {
            Blob = new AzureNative.Storage.Inputs.EncryptionServiceArgs
            {
                Enabled = false,
                KeyType = "string",
            },
            File = new AzureNative.Storage.Inputs.EncryptionServiceArgs
            {
                Enabled = false,
                KeyType = "string",
            },
            Queue = new AzureNative.Storage.Inputs.EncryptionServiceArgs
            {
                Enabled = false,
                KeyType = "string",
            },
            Table = new AzureNative.Storage.Inputs.EncryptionServiceArgs
            {
                Enabled = false,
                KeyType = "string",
            },
        },
    },
    ExtendedLocation = new AzureNative.Storage.Inputs.ExtendedLocationArgs
    {
        Name = "string",
        Type = "string",
    },
    AccessTier = AzureNative.Storage.AccessTier.Hot,
    ImmutableStorageWithVersioning = new AzureNative.Storage.Inputs.ImmutableStorageAccountArgs
    {
        Enabled = false,
        ImmutabilityPolicy = new AzureNative.Storage.Inputs.AccountImmutabilityPolicyPropertiesArgs
        {
            AllowProtectedAppendWrites = false,
            ImmutabilityPeriodSinceCreationInDays = 0,
            State = "string",
        },
    },
    AllowSharedKeyAccess = false,
    IsLocalUserEnabled = false,
    IsSftpEnabled = false,
    KeyPolicy = new AzureNative.Storage.Inputs.KeyPolicyArgs
    {
        KeyExpirationPeriodInDays = 0,
    },
    AllowCrossTenantReplication = false,
    LargeFileSharesState = "string",
    Location = "string",
    MinimumTlsVersion = "string",
    NetworkRuleSet = new AzureNative.Storage.Inputs.NetworkRuleSetArgs
    {
        DefaultAction = AzureNative.Storage.DefaultAction.Allow,
        Bypass = "string",
        IpRules = new[]
        {
            new AzureNative.Storage.Inputs.IPRuleArgs
            {
                IPAddressOrRange = "string",
                Action = AzureNative.Storage.Action.Allow,
            },
        },
        ResourceAccessRules = new[]
        {
            new AzureNative.Storage.Inputs.ResourceAccessRuleArgs
            {
                ResourceId = "string",
                TenantId = "string",
            },
        },
        VirtualNetworkRules = new[]
        {
            new AzureNative.Storage.Inputs.VirtualNetworkRuleArgs
            {
                VirtualNetworkResourceId = "string",
                Action = AzureNative.Storage.Action.Allow,
                State = "string",
            },
        },
    },
    PublicNetworkAccess = "string",
    AllowBlobPublicAccess = false,
    RoutingPreference = new AzureNative.Storage.Inputs.RoutingPreferenceArgs
    {
        PublishInternetEndpoints = false,
        PublishMicrosoftEndpoints = false,
        RoutingChoice = "string",
    },
    SasPolicy = new AzureNative.Storage.Inputs.SasPolicyArgs
    {
        ExpirationAction = "string",
        SasExpirationPeriod = "string",
    },
    AccountName = "string",
    Tags = 
    {
        { "string", "string" },
    },
});
example, err := storage.NewStorageAccount(ctx, "azure-nativeStorageAccountResource", &storage.StorageAccountArgs{
	Kind: pulumi.String("string"),
	Sku: &storage.SkuArgs{
		Name: pulumi.String("string"),
	},
	ResourceGroupName: pulumi.String("string"),
	Identity: &storage.IdentityArgs{
		Type: pulumi.String("string"),
		UserAssignedIdentities: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
	IsHnsEnabled:     pulumi.Bool(false),
	AllowedCopyScope: pulumi.String("string"),
	AzureFilesIdentityBasedAuthentication: &storage.AzureFilesIdentityBasedAuthenticationArgs{
		DirectoryServiceOptions: pulumi.String("string"),
		ActiveDirectoryProperties: &storage.ActiveDirectoryPropertiesArgs{
			DomainGuid:        pulumi.String("string"),
			DomainName:        pulumi.String("string"),
			AccountType:       pulumi.String("string"),
			AzureStorageSid:   pulumi.String("string"),
			DomainSid:         pulumi.String("string"),
			ForestName:        pulumi.String("string"),
			NetBiosDomainName: pulumi.String("string"),
			SamAccountName:    pulumi.String("string"),
		},
		DefaultSharePermission: pulumi.String("string"),
	},
	CustomDomain: &storage.CustomDomainArgs{
		Name:             pulumi.String("string"),
		UseSubDomainName: pulumi.Bool(false),
	},
	DefaultToOAuthAuthentication: pulumi.Bool(false),
	DnsEndpointType:              pulumi.String("string"),
	EnableHttpsTrafficOnly:       pulumi.Bool(false),
	EnableNfsV3:                  pulumi.Bool(false),
	Encryption: &storage.EncryptionArgs{
		EncryptionIdentity: &storage.EncryptionIdentityArgs{
			EncryptionFederatedIdentityClientId: pulumi.String("string"),
			EncryptionUserAssignedIdentity:      pulumi.String("string"),
		},
		KeySource: pulumi.String("string"),
		KeyVaultProperties: &storage.KeyVaultPropertiesArgs{
			KeyName:     pulumi.String("string"),
			KeyVaultUri: pulumi.String("string"),
			KeyVersion:  pulumi.String("string"),
		},
		RequireInfrastructureEncryption: pulumi.Bool(false),
		Services: &storage.EncryptionServicesArgs{
			Blob: &storage.EncryptionServiceArgs{
				Enabled: pulumi.Bool(false),
				KeyType: pulumi.String("string"),
			},
			File: &storage.EncryptionServiceArgs{
				Enabled: pulumi.Bool(false),
				KeyType: pulumi.String("string"),
			},
			Queue: &storage.EncryptionServiceArgs{
				Enabled: pulumi.Bool(false),
				KeyType: pulumi.String("string"),
			},
			Table: &storage.EncryptionServiceArgs{
				Enabled: pulumi.Bool(false),
				KeyType: pulumi.String("string"),
			},
		},
	},
	ExtendedLocation: &storage.ExtendedLocationArgs{
		Name: pulumi.String("string"),
		Type: pulumi.String("string"),
	},
	AccessTier: storage.AccessTierHot,
	ImmutableStorageWithVersioning: &storage.ImmutableStorageAccountArgs{
		Enabled: pulumi.Bool(false),
		ImmutabilityPolicy: &storage.AccountImmutabilityPolicyPropertiesArgs{
			AllowProtectedAppendWrites:            pulumi.Bool(false),
			ImmutabilityPeriodSinceCreationInDays: pulumi.Int(0),
			State:                                 pulumi.String("string"),
		},
	},
	AllowSharedKeyAccess: pulumi.Bool(false),
	IsLocalUserEnabled:   pulumi.Bool(false),
	IsSftpEnabled:        pulumi.Bool(false),
	KeyPolicy: &storage.KeyPolicyArgs{
		KeyExpirationPeriodInDays: pulumi.Int(0),
	},
	AllowCrossTenantReplication: pulumi.Bool(false),
	LargeFileSharesState:        pulumi.String("string"),
	Location:                    pulumi.String("string"),
	MinimumTlsVersion:           pulumi.String("string"),
	NetworkRuleSet: &storage.NetworkRuleSetArgs{
		DefaultAction: storage.DefaultActionAllow,
		Bypass:        pulumi.String("string"),
		IpRules: storage.IPRuleArray{
			&storage.IPRuleArgs{
				IPAddressOrRange: pulumi.String("string"),
				Action:           storage.ActionAllow,
			},
		},
		ResourceAccessRules: storage.ResourceAccessRuleArray{
			&storage.ResourceAccessRuleArgs{
				ResourceId: pulumi.String("string"),
				TenantId:   pulumi.String("string"),
			},
		},
		VirtualNetworkRules: storage.VirtualNetworkRuleArray{
			&storage.VirtualNetworkRuleArgs{
				VirtualNetworkResourceId: pulumi.String("string"),
				Action:                   storage.ActionAllow,
				State:                    pulumi.String("string"),
			},
		},
	},
	PublicNetworkAccess:   pulumi.String("string"),
	AllowBlobPublicAccess: pulumi.Bool(false),
	RoutingPreference: &storage.RoutingPreferenceArgs{
		PublishInternetEndpoints:  pulumi.Bool(false),
		PublishMicrosoftEndpoints: pulumi.Bool(false),
		RoutingChoice:             pulumi.String("string"),
	},
	SasPolicy: &storage.SasPolicyArgs{
		ExpirationAction:    pulumi.String("string"),
		SasExpirationPeriod: pulumi.String("string"),
	},
	AccountName: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
})
var azure_nativeStorageAccountResource = new StorageAccount("azure-nativeStorageAccountResource", StorageAccountArgs.builder()
    .kind("string")
    .sku(SkuArgs.builder()
        .name("string")
        .build())
    .resourceGroupName("string")
    .identity(IdentityArgs.builder()
        .type("string")
        .userAssignedIdentities("string")
        .build())
    .isHnsEnabled(false)
    .allowedCopyScope("string")
    .azureFilesIdentityBasedAuthentication(AzureFilesIdentityBasedAuthenticationArgs.builder()
        .directoryServiceOptions("string")
        .activeDirectoryProperties(ActiveDirectoryPropertiesArgs.builder()
            .domainGuid("string")
            .domainName("string")
            .accountType("string")
            .azureStorageSid("string")
            .domainSid("string")
            .forestName("string")
            .netBiosDomainName("string")
            .samAccountName("string")
            .build())
        .defaultSharePermission("string")
        .build())
    .customDomain(CustomDomainArgs.builder()
        .name("string")
        .useSubDomainName(false)
        .build())
    .defaultToOAuthAuthentication(false)
    .dnsEndpointType("string")
    .enableHttpsTrafficOnly(false)
    .enableNfsV3(false)
    .encryption(EncryptionArgs.builder()
        .encryptionIdentity(EncryptionIdentityArgs.builder()
            .encryptionFederatedIdentityClientId("string")
            .encryptionUserAssignedIdentity("string")
            .build())
        .keySource("string")
        .keyVaultProperties(KeyVaultPropertiesArgs.builder()
            .keyName("string")
            .keyVaultUri("string")
            .keyVersion("string")
            .build())
        .requireInfrastructureEncryption(false)
        .services(EncryptionServicesArgs.builder()
            .blob(EncryptionServiceArgs.builder()
                .enabled(false)
                .keyType("string")
                .build())
            .file(EncryptionServiceArgs.builder()
                .enabled(false)
                .keyType("string")
                .build())
            .queue(EncryptionServiceArgs.builder()
                .enabled(false)
                .keyType("string")
                .build())
            .table(EncryptionServiceArgs.builder()
                .enabled(false)
                .keyType("string")
                .build())
            .build())
        .build())
    .extendedLocation(ExtendedLocationArgs.builder()
        .name("string")
        .type("string")
        .build())
    .accessTier("Hot")
    .immutableStorageWithVersioning(ImmutableStorageAccountArgs.builder()
        .enabled(false)
        .immutabilityPolicy(AccountImmutabilityPolicyPropertiesArgs.builder()
            .allowProtectedAppendWrites(false)
            .immutabilityPeriodSinceCreationInDays(0)
            .state("string")
            .build())
        .build())
    .allowSharedKeyAccess(false)
    .isLocalUserEnabled(false)
    .isSftpEnabled(false)
    .keyPolicy(KeyPolicyArgs.builder()
        .keyExpirationPeriodInDays(0)
        .build())
    .allowCrossTenantReplication(false)
    .largeFileSharesState("string")
    .location("string")
    .minimumTlsVersion("string")
    .networkRuleSet(NetworkRuleSetArgs.builder()
        .defaultAction("Allow")
        .bypass("string")
        .ipRules(IPRuleArgs.builder()
            .iPAddressOrRange("string")
            .action("Allow")
            .build())
        .resourceAccessRules(ResourceAccessRuleArgs.builder()
            .resourceId("string")
            .tenantId("string")
            .build())
        .virtualNetworkRules(VirtualNetworkRuleArgs.builder()
            .virtualNetworkResourceId("string")
            .action("Allow")
            .state("string")
            .build())
        .build())
    .publicNetworkAccess("string")
    .allowBlobPublicAccess(false)
    .routingPreference(RoutingPreferenceArgs.builder()
        .publishInternetEndpoints(false)
        .publishMicrosoftEndpoints(false)
        .routingChoice("string")
        .build())
    .sasPolicy(SasPolicyArgs.builder()
        .expirationAction("string")
        .sasExpirationPeriod("string")
        .build())
    .accountName("string")
    .tags(Map.of("string", "string"))
    .build());
azure_native_storage_account_resource = azure_native.storage.StorageAccount("azure-nativeStorageAccountResource",
    kind="string",
    sku={
        "name": "string",
    },
    resource_group_name="string",
    identity={
        "type": "string",
        "user_assigned_identities": ["string"],
    },
    is_hns_enabled=False,
    allowed_copy_scope="string",
    azure_files_identity_based_authentication={
        "directory_service_options": "string",
        "active_directory_properties": {
            "domain_guid": "string",
            "domain_name": "string",
            "account_type": "string",
            "azure_storage_sid": "string",
            "domain_sid": "string",
            "forest_name": "string",
            "net_bios_domain_name": "string",
            "sam_account_name": "string",
        },
        "default_share_permission": "string",
    },
    custom_domain={
        "name": "string",
        "use_sub_domain_name": False,
    },
    default_to_o_auth_authentication=False,
    dns_endpoint_type="string",
    enable_https_traffic_only=False,
    enable_nfs_v3=False,
    encryption={
        "encryption_identity": {
            "encryption_federated_identity_client_id": "string",
            "encryption_user_assigned_identity": "string",
        },
        "key_source": "string",
        "key_vault_properties": {
            "key_name": "string",
            "key_vault_uri": "string",
            "key_version": "string",
        },
        "require_infrastructure_encryption": False,
        "services": {
            "blob": {
                "enabled": False,
                "key_type": "string",
            },
            "file": {
                "enabled": False,
                "key_type": "string",
            },
            "queue": {
                "enabled": False,
                "key_type": "string",
            },
            "table": {
                "enabled": False,
                "key_type": "string",
            },
        },
    },
    extended_location={
        "name": "string",
        "type": "string",
    },
    access_tier=azure_native.storage.AccessTier.HOT,
    immutable_storage_with_versioning={
        "enabled": False,
        "immutability_policy": {
            "allow_protected_append_writes": False,
            "immutability_period_since_creation_in_days": 0,
            "state": "string",
        },
    },
    allow_shared_key_access=False,
    is_local_user_enabled=False,
    is_sftp_enabled=False,
    key_policy={
        "key_expiration_period_in_days": 0,
    },
    allow_cross_tenant_replication=False,
    large_file_shares_state="string",
    location="string",
    minimum_tls_version="string",
    network_rule_set={
        "default_action": azure_native.storage.DefaultAction.ALLOW,
        "bypass": "string",
        "ip_rules": [{
            "i_p_address_or_range": "string",
            "action": azure_native.storage.Action.ALLOW,
        }],
        "resource_access_rules": [{
            "resource_id": "string",
            "tenant_id": "string",
        }],
        "virtual_network_rules": [{
            "virtual_network_resource_id": "string",
            "action": azure_native.storage.Action.ALLOW,
            "state": "string",
        }],
    },
    public_network_access="string",
    allow_blob_public_access=False,
    routing_preference={
        "publish_internet_endpoints": False,
        "publish_microsoft_endpoints": False,
        "routing_choice": "string",
    },
    sas_policy={
        "expiration_action": "string",
        "sas_expiration_period": "string",
    },
    account_name="string",
    tags={
        "string": "string",
    })
const azure_nativeStorageAccountResource = new azure_native.storage.StorageAccount("azure-nativeStorageAccountResource", {
    kind: "string",
    sku: {
        name: "string",
    },
    resourceGroupName: "string",
    identity: {
        type: "string",
        userAssignedIdentities: ["string"],
    },
    isHnsEnabled: false,
    allowedCopyScope: "string",
    azureFilesIdentityBasedAuthentication: {
        directoryServiceOptions: "string",
        activeDirectoryProperties: {
            domainGuid: "string",
            domainName: "string",
            accountType: "string",
            azureStorageSid: "string",
            domainSid: "string",
            forestName: "string",
            netBiosDomainName: "string",
            samAccountName: "string",
        },
        defaultSharePermission: "string",
    },
    customDomain: {
        name: "string",
        useSubDomainName: false,
    },
    defaultToOAuthAuthentication: false,
    dnsEndpointType: "string",
    enableHttpsTrafficOnly: false,
    enableNfsV3: false,
    encryption: {
        encryptionIdentity: {
            encryptionFederatedIdentityClientId: "string",
            encryptionUserAssignedIdentity: "string",
        },
        keySource: "string",
        keyVaultProperties: {
            keyName: "string",
            keyVaultUri: "string",
            keyVersion: "string",
        },
        requireInfrastructureEncryption: false,
        services: {
            blob: {
                enabled: false,
                keyType: "string",
            },
            file: {
                enabled: false,
                keyType: "string",
            },
            queue: {
                enabled: false,
                keyType: "string",
            },
            table: {
                enabled: false,
                keyType: "string",
            },
        },
    },
    extendedLocation: {
        name: "string",
        type: "string",
    },
    accessTier: azure_native.storage.AccessTier.Hot,
    immutableStorageWithVersioning: {
        enabled: false,
        immutabilityPolicy: {
            allowProtectedAppendWrites: false,
            immutabilityPeriodSinceCreationInDays: 0,
            state: "string",
        },
    },
    allowSharedKeyAccess: false,
    isLocalUserEnabled: false,
    isSftpEnabled: false,
    keyPolicy: {
        keyExpirationPeriodInDays: 0,
    },
    allowCrossTenantReplication: false,
    largeFileSharesState: "string",
    location: "string",
    minimumTlsVersion: "string",
    networkRuleSet: {
        defaultAction: azure_native.storage.DefaultAction.Allow,
        bypass: "string",
        ipRules: [{
            iPAddressOrRange: "string",
            action: azure_native.storage.Action.Allow,
        }],
        resourceAccessRules: [{
            resourceId: "string",
            tenantId: "string",
        }],
        virtualNetworkRules: [{
            virtualNetworkResourceId: "string",
            action: azure_native.storage.Action.Allow,
            state: "string",
        }],
    },
    publicNetworkAccess: "string",
    allowBlobPublicAccess: false,
    routingPreference: {
        publishInternetEndpoints: false,
        publishMicrosoftEndpoints: false,
        routingChoice: "string",
    },
    sasPolicy: {
        expirationAction: "string",
        sasExpirationPeriod: "string",
    },
    accountName: "string",
    tags: {
        string: "string",
    },
});
type: azure-native:storage:StorageAccount
properties:
    accessTier: Hot
    accountName: string
    allowBlobPublicAccess: false
    allowCrossTenantReplication: false
    allowSharedKeyAccess: false
    allowedCopyScope: string
    azureFilesIdentityBasedAuthentication:
        activeDirectoryProperties:
            accountType: string
            azureStorageSid: string
            domainGuid: string
            domainName: string
            domainSid: string
            forestName: string
            netBiosDomainName: string
            samAccountName: string
        defaultSharePermission: string
        directoryServiceOptions: string
    customDomain:
        name: string
        useSubDomainName: false
    defaultToOAuthAuthentication: false
    dnsEndpointType: string
    enableHttpsTrafficOnly: false
    enableNfsV3: false
    encryption:
        encryptionIdentity:
            encryptionFederatedIdentityClientId: string
            encryptionUserAssignedIdentity: string
        keySource: string
        keyVaultProperties:
            keyName: string
            keyVaultUri: string
            keyVersion: string
        requireInfrastructureEncryption: false
        services:
            blob:
                enabled: false
                keyType: string
            file:
                enabled: false
                keyType: string
            queue:
                enabled: false
                keyType: string
            table:
                enabled: false
                keyType: string
    extendedLocation:
        name: string
        type: string
    identity:
        type: string
        userAssignedIdentities:
            - string
    immutableStorageWithVersioning:
        enabled: false
        immutabilityPolicy:
            allowProtectedAppendWrites: false
            immutabilityPeriodSinceCreationInDays: 0
            state: string
    isHnsEnabled: false
    isLocalUserEnabled: false
    isSftpEnabled: false
    keyPolicy:
        keyExpirationPeriodInDays: 0
    kind: string
    largeFileSharesState: string
    location: string
    minimumTlsVersion: string
    networkRuleSet:
        bypass: string
        defaultAction: Allow
        ipRules:
            - action: Allow
              iPAddressOrRange: string
        resourceAccessRules:
            - resourceId: string
              tenantId: string
        virtualNetworkRules:
            - action: Allow
              state: string
              virtualNetworkResourceId: string
    publicNetworkAccess: string
    resourceGroupName: string
    routingPreference:
        publishInternetEndpoints: false
        publishMicrosoftEndpoints: false
        routingChoice: string
    sasPolicy:
        expirationAction: string
        sasExpirationPeriod: string
    sku:
        name: string
    tags:
        string: string
StorageAccount Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The StorageAccount resource accepts the following input properties:
- Kind
string | Pulumi.Azure Native. Storage. Kind 
- Required. Indicates the type of storage account.
- ResourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- Sku
Pulumi.Azure Native. Storage. Inputs. Sku 
- Required. Gets or sets the SKU name.
- AccessTier Pulumi.Azure Native. Storage. Access Tier 
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- AccountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- AllowBlob boolPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- AllowCross boolTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- AllowedCopy string | Pulumi.Scope Azure Native. Storage. Allowed Copy Scope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- AzureFiles Pulumi.Identity Based Authentication Azure Native. Storage. Inputs. Azure Files Identity Based Authentication 
- Provides the identity based authentication settings for Azure Files.
- CustomDomain Pulumi.Azure Native. Storage. Inputs. Custom Domain 
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- DefaultTo boolOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- DnsEndpoint string | Pulumi.Type Azure Native. Storage. Dns Endpoint Type 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- EnableHttps boolTraffic Only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- EnableNfs boolV3 
- NFS 3.0 protocol support enabled if set to true.
- Encryption
Pulumi.Azure Native. Storage. Inputs. Encryption 
- Encryption settings to be used for server-side encryption for the storage account.
- ExtendedLocation Pulumi.Azure Native. Storage. Inputs. Extended Location 
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- Identity
Pulumi.Azure Native. Storage. Inputs. Identity 
- The identity of the resource.
- ImmutableStorage Pulumi.With Versioning Azure Native. Storage. Inputs. Immutable Storage Account 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- IsHns boolEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- IsLocal boolUser Enabled 
- Enables local users feature, if set to true
- IsSftp boolEnabled 
- Enables Secure File Transfer Protocol, if set to true
- KeyPolicy Pulumi.Azure Native. Storage. Inputs. Key Policy 
- KeyPolicy assigned to the storage account.
- 
string | Pulumi.Azure Native. Storage. Large File Shares State 
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- Location string
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- MinimumTls string | Pulumi.Version Azure Native. Storage. Minimum Tls Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- NetworkRule Pulumi.Set Azure Native. Storage. Inputs. Network Rule Set 
- Network rule set
- PublicNetwork string | Pulumi.Access Azure Native. Storage. Public Network Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- RoutingPreference Pulumi.Azure Native. Storage. Inputs. Routing Preference 
- Maintains information about the network routing choice opted by the user for data transfer
- SasPolicy Pulumi.Azure Native. Storage. Inputs. Sas Policy 
- SasPolicy assigned to the storage account.
- Dictionary<string, string>
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- Kind string | Kind
- Required. Indicates the type of storage account.
- ResourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- Sku
SkuArgs 
- Required. Gets or sets the SKU name.
- AccessTier AccessTier 
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- AccountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- AllowBlob boolPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- AllowCross boolTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- AllowedCopy string | AllowedScope Copy Scope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- AzureFiles AzureIdentity Based Authentication Files Identity Based Authentication Args 
- Provides the identity based authentication settings for Azure Files.
- CustomDomain CustomDomain Args 
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- DefaultTo boolOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- DnsEndpoint string | DnsType Endpoint Type 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- EnableHttps boolTraffic Only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- EnableNfs boolV3 
- NFS 3.0 protocol support enabled if set to true.
- Encryption
EncryptionArgs 
- Encryption settings to be used for server-side encryption for the storage account.
- ExtendedLocation ExtendedLocation Args 
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- Identity
IdentityArgs 
- The identity of the resource.
- ImmutableStorage ImmutableWith Versioning Storage Account Args 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- IsHns boolEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- IsLocal boolUser Enabled 
- Enables local users feature, if set to true
- IsSftp boolEnabled 
- Enables Secure File Transfer Protocol, if set to true
- KeyPolicy KeyPolicy Args 
- KeyPolicy assigned to the storage account.
- 
string | LargeFile Shares State 
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- Location string
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- MinimumTls string | MinimumVersion Tls Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- NetworkRule NetworkSet Rule Set Args 
- Network rule set
- PublicNetwork string | PublicAccess Network Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- RoutingPreference RoutingPreference Args 
- Maintains information about the network routing choice opted by the user for data transfer
- SasPolicy SasPolicy Args 
- SasPolicy assigned to the storage account.
- map[string]string
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- kind String | Kind
- Required. Indicates the type of storage account.
- resourceGroup StringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- sku Sku
- Required. Gets or sets the SKU name.
- accessTier AccessTier 
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- accountName String
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- allowBlob BooleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross BooleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- Boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy String | AllowedScope Copy Scope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles AzureIdentity Based Authentication Files Identity Based Authentication 
- Provides the identity based authentication settings for Azure Files.
- customDomain CustomDomain 
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- defaultTo BooleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint String | DnsType Endpoint Type 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps BooleanTraffic Only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- enableNfs BooleanV3 
- NFS 3.0 protocol support enabled if set to true.
- encryption Encryption
- Encryption settings to be used for server-side encryption for the storage account.
- extendedLocation ExtendedLocation 
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- identity Identity
- The identity of the resource.
- immutableStorage ImmutableWith Versioning Storage Account 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- isHns BooleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal BooleanUser Enabled 
- Enables local users feature, if set to true
- isSftp BooleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- keyPolicy KeyPolicy 
- KeyPolicy assigned to the storage account.
- 
String | LargeFile Shares State 
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- location String
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- minimumTls String | MinimumVersion Tls Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- networkRule NetworkSet Rule Set 
- Network rule set
- publicNetwork String | PublicAccess Network Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference RoutingPreference 
- Maintains information about the network routing choice opted by the user for data transfer
- sasPolicy SasPolicy 
- SasPolicy assigned to the storage account.
- Map<String,String>
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- kind string | Kind
- Required. Indicates the type of storage account.
- resourceGroup stringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- sku Sku
- Required. Gets or sets the SKU name.
- accessTier AccessTier 
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- accountName string
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- allowBlob booleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross booleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy string | AllowedScope Copy Scope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles AzureIdentity Based Authentication Files Identity Based Authentication 
- Provides the identity based authentication settings for Azure Files.
- customDomain CustomDomain 
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- defaultTo booleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint string | DnsType Endpoint Type 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps booleanTraffic Only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- enableNfs booleanV3 
- NFS 3.0 protocol support enabled if set to true.
- encryption Encryption
- Encryption settings to be used for server-side encryption for the storage account.
- extendedLocation ExtendedLocation 
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- identity Identity
- The identity of the resource.
- immutableStorage ImmutableWith Versioning Storage Account 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- isHns booleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal booleanUser Enabled 
- Enables local users feature, if set to true
- isSftp booleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- keyPolicy KeyPolicy 
- KeyPolicy assigned to the storage account.
- 
string | LargeFile Shares State 
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- location string
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- minimumTls string | MinimumVersion Tls Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- networkRule NetworkSet Rule Set 
- Network rule set
- publicNetwork string | PublicAccess Network Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference RoutingPreference 
- Maintains information about the network routing choice opted by the user for data transfer
- sasPolicy SasPolicy 
- SasPolicy assigned to the storage account.
- {[key: string]: string}
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- kind str | Kind
- Required. Indicates the type of storage account.
- resource_group_ strname 
- The name of the resource group within the user's subscription. The name is case insensitive.
- sku
SkuArgs 
- Required. Gets or sets the SKU name.
- access_tier AccessTier 
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- account_name str
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- allow_blob_ boolpublic_ access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allow_cross_ booltenant_ replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- bool
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowed_copy_ str | Allowedscope Copy Scope 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azure_files_ Azureidentity_ based_ authentication Files Identity Based Authentication Args 
- Provides the identity based authentication settings for Azure Files.
- custom_domain CustomDomain Args 
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- default_to_ boolo_ auth_ authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dns_endpoint_ str | Dnstype Endpoint Type 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enable_https_ booltraffic_ only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- enable_nfs_ boolv3 
- NFS 3.0 protocol support enabled if set to true.
- encryption
EncryptionArgs 
- Encryption settings to be used for server-side encryption for the storage account.
- extended_location ExtendedLocation Args 
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- identity
IdentityArgs 
- The identity of the resource.
- immutable_storage_ Immutablewith_ versioning Storage Account Args 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- is_hns_ boolenabled 
- Account HierarchicalNamespace enabled if sets to true.
- is_local_ booluser_ enabled 
- Enables local users feature, if set to true
- is_sftp_ boolenabled 
- Enables Secure File Transfer Protocol, if set to true
- key_policy KeyPolicy Args 
- KeyPolicy assigned to the storage account.
- 
str | LargeFile Shares State 
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- location str
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- minimum_tls_ str | Minimumversion Tls Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- network_rule_ Networkset Rule Set Args 
- Network rule set
- public_network_ str | Publicaccess Network Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routing_preference RoutingPreference Args 
- Maintains information about the network routing choice opted by the user for data transfer
- sas_policy SasPolicy Args 
- SasPolicy assigned to the storage account.
- Mapping[str, str]
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
- kind
String | "Storage" | "StorageV2" | "Blob Storage" | "File Storage" | "Block Blob Storage" 
- Required. Indicates the type of storage account.
- resourceGroup StringName 
- The name of the resource group within the user's subscription. The name is case insensitive.
- sku Property Map
- Required. Gets or sets the SKU name.
- accessTier "Hot" | "Cool" | "Premium"
- Required for storage accounts where kind = BlobStorage. The access tier is used for billing. The 'Premium' access tier is the default value for premium block blobs storage account type and it cannot be changed for the premium block blobs storage account type.
- accountName String
- The name of the storage account within the specified resource group. Storage account names must be between 3 and 24 characters in length and use numbers and lower-case letters only.
- allowBlob BooleanPublic Access 
- Allow or disallow public access to all blobs or containers in the storage account. The default interpretation is true for this property.
- allowCross BooleanTenant Replication 
- Allow or disallow cross AAD tenant object replication. The default interpretation is true for this property.
- Boolean
- Indicates whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests, including shared access signatures, must be authorized with Azure Active Directory (Azure AD). The default value is null, which is equivalent to true.
- allowedCopy String | "PrivateScope Link" | "AAD" 
- Restrict copy to and from Storage Accounts within an AAD tenant or with Private Links to the same VNet.
- azureFiles Property MapIdentity Based Authentication 
- Provides the identity based authentication settings for Azure Files.
- customDomain Property Map
- User domain assigned to the storage account. Name is the CNAME source. Only one custom domain is supported per storage account at this time. To clear the existing custom domain, use an empty string for the custom domain name property.
- defaultTo BooleanOAuth Authentication 
- A boolean flag which indicates whether the default authentication is OAuth or not. The default interpretation is false for this property.
- dnsEndpoint String | "Standard" | "AzureType Dns Zone" 
- Allows you to specify the type of endpoint. Set this to AzureDNSZone to create a large number of accounts in a single subscription, which creates accounts in an Azure DNS Zone and the endpoint URL will have an alphanumeric DNS Zone identifier.
- enableHttps BooleanTraffic Only 
- Allows https traffic only to storage service if sets to true. The default value is true since API version 2019-04-01.
- enableNfs BooleanV3 
- NFS 3.0 protocol support enabled if set to true.
- encryption Property Map
- Encryption settings to be used for server-side encryption for the storage account.
- extendedLocation Property Map
- Optional. Set the extended location of the resource. If not set, the storage account will be created in Azure main region. Otherwise it will be created in the specified extended location
- identity Property Map
- The identity of the resource.
- immutableStorage Property MapWith Versioning 
- The property is immutable and can only be set to true at the account creation time. When set to true, it enables object level immutability for all the new containers in the account by default.
- isHns BooleanEnabled 
- Account HierarchicalNamespace enabled if sets to true.
- isLocal BooleanUser Enabled 
- Enables local users feature, if set to true
- isSftp BooleanEnabled 
- Enables Secure File Transfer Protocol, if set to true
- keyPolicy Property Map
- KeyPolicy assigned to the storage account.
- String | "Disabled" | "Enabled"
- Allow large file shares if sets to Enabled. It cannot be disabled once it is enabled.
- location String
- Required. Gets or sets the location of the resource. This will be one of the supported and registered Azure Geo Regions (e.g. West US, East US, Southeast Asia, etc.). The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed.
- minimumTls String | "TLS1_0" | "TLS1_1" | "TLS1_2"Version 
- Set the minimum TLS version to be permitted on requests to storage. The default interpretation is TLS 1.0 for this property.
- networkRule Property MapSet 
- Network rule set
- publicNetwork String | "Enabled" | "Disabled"Access 
- Allow or disallow public network access to Storage Account. Value is optional but if passed in, must be 'Enabled' or 'Disabled'.
- routingPreference Property Map
- Maintains information about the network routing choice opted by the user for data transfer
- sasPolicy Property Map
- SasPolicy assigned to the storage account.
- Map<String>
- Gets or sets a list of key value pairs that describe the resource. These tags can be used for viewing and grouping this resource (across resource groups). A maximum of 15 tags can be provided for a resource. Each tag must have a key with a length no greater than 128 characters and a value with a length no greater than 256 characters.
Outputs
All input properties are implicitly available as output properties. Additionally, the StorageAccount resource produces the following output properties:
- BlobRestore Pulumi.Status Azure Native. Storage. Outputs. Blob Restore Status Response 
- Blob restore status
- CreationTime string
- Gets the creation date and time of the storage account in UTC.
- FailoverIn boolProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- GeoReplication Pulumi.Stats Azure Native. Storage. Outputs. Geo Replication Stats Response 
- Geo Replication Stats
- Id string
- The provider-assigned unique ID for this managed resource.
- KeyCreation Pulumi.Time Azure Native. Storage. Outputs. Key Creation Time Response 
- Storage account keys creation time.
- LastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Name string
- The name of the resource
- PrimaryEndpoints Pulumi.Azure Native. Storage. Outputs. Endpoints Response 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- PrimaryLocation string
- Gets the location of the primary data center for the storage account.
- PrivateEndpoint List<Pulumi.Connections Azure Native. Storage. Outputs. Private Endpoint Connection Response> 
- List of private endpoint connection associated with the specified storage account
- ProvisioningState string
- Gets the status of the storage account at the time the operation was called.
- SecondaryEndpoints Pulumi.Azure Native. Storage. Outputs. Endpoints Response 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- SecondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- StatusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- StatusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- StorageAccount Pulumi.Sku Conversion Status Azure Native. Storage. Outputs. Storage Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- BlobRestore BlobStatus Restore Status Response 
- Blob restore status
- CreationTime string
- Gets the creation date and time of the storage account in UTC.
- FailoverIn boolProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- GeoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- Id string
- The provider-assigned unique ID for this managed resource.
- KeyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- LastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- Name string
- The name of the resource
- PrimaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- PrimaryLocation string
- Gets the location of the primary data center for the storage account.
- PrivateEndpoint []PrivateConnections Endpoint Connection Response 
- List of private endpoint connection associated with the specified storage account
- ProvisioningState string
- Gets the status of the storage account at the time the operation was called.
- SecondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- SecondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- StatusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- StatusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- StorageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- blobRestore BlobStatus Restore Status Response 
- Blob restore status
- creationTime String
- Gets the creation date and time of the storage account in UTC.
- failoverIn BooleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- id String
- The provider-assigned unique ID for this managed resource.
- keyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- lastGeo StringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- name String
- The name of the resource
- primaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation String
- Gets the location of the primary data center for the storage account.
- privateEndpoint List<PrivateConnections Endpoint Connection Response> 
- List of private endpoint connection associated with the specified storage account
- provisioningState String
- Gets the status of the storage account at the time the operation was called.
- secondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation String
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- statusOf StringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf StringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- storageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- blobRestore BlobStatus Restore Status Response 
- Blob restore status
- creationTime string
- Gets the creation date and time of the storage account in UTC.
- failoverIn booleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication GeoStats Replication Stats Response 
- Geo Replication Stats
- id string
- The provider-assigned unique ID for this managed resource.
- keyCreation KeyTime Creation Time Response 
- Storage account keys creation time.
- lastGeo stringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- name string
- The name of the resource
- primaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation string
- Gets the location of the primary data center for the storage account.
- privateEndpoint PrivateConnections Endpoint Connection Response[] 
- List of private endpoint connection associated with the specified storage account
- provisioningState string
- Gets the status of the storage account at the time the operation was called.
- secondaryEndpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation string
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- statusOf stringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf stringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- storageAccount StorageSku Conversion Status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- blob_restore_ Blobstatus Restore Status Response 
- Blob restore status
- creation_time str
- Gets the creation date and time of the storage account in UTC.
- failover_in_ boolprogress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geo_replication_ Geostats Replication Stats Response 
- Geo Replication Stats
- id str
- The provider-assigned unique ID for this managed resource.
- key_creation_ Keytime Creation Time Response 
- Storage account keys creation time.
- last_geo_ strfailover_ time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- name str
- The name of the resource
- primary_endpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primary_location str
- Gets the location of the primary data center for the storage account.
- private_endpoint_ Sequence[Privateconnections Endpoint Connection Response] 
- List of private endpoint connection associated with the specified storage account
- provisioning_state str
- Gets the status of the storage account at the time the operation was called.
- secondary_endpoints EndpointsResponse 
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondary_location str
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- status_of_ strprimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- status_of_ strsecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- storage_account_ Storagesku_ conversion_ status Account Sku Conversion Status Response 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
- blobRestore Property MapStatus 
- Blob restore status
- creationTime String
- Gets the creation date and time of the storage account in UTC.
- failoverIn BooleanProgress 
- If the failover is in progress, the value will be true, otherwise, it will be null.
- geoReplication Property MapStats 
- Geo Replication Stats
- id String
- The provider-assigned unique ID for this managed resource.
- keyCreation Property MapTime 
- Storage account keys creation time.
- lastGeo StringFailover Time 
- Gets the timestamp of the most recent instance of a failover to the secondary location. Only the most recent timestamp is retained. This element is not returned if there has never been a failover instance. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- name String
- The name of the resource
- primaryEndpoints Property Map
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object. Note that Standard_ZRS and Premium_LRS accounts only return the blob endpoint.
- primaryLocation String
- Gets the location of the primary data center for the storage account.
- privateEndpoint List<Property Map>Connections 
- List of private endpoint connection associated with the specified storage account
- provisioningState String
- Gets the status of the storage account at the time the operation was called.
- secondaryEndpoints Property Map
- Gets the URLs that are used to perform a retrieval of a public blob, queue, or table object from the secondary location of the storage account. Only available if the SKU name is Standard_RAGRS.
- secondaryLocation String
- Gets the location of the geo-replicated secondary for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS.
- statusOf StringPrimary 
- Gets the status indicating whether the primary location of the storage account is available or unavailable.
- statusOf StringSecondary 
- Gets the status indicating whether the secondary location of the storage account is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- storageAccount Property MapSku Conversion Status 
- This property is readOnly and is set by server during asynchronous storage account sku conversion operations.
Supporting Types
AccessTier, AccessTierArgs    
- Hot
- Hot
- Cool
- Cool
- Premium
- Premium
- AccessTier Hot 
- Hot
- AccessTier Cool 
- Cool
- AccessTier Premium 
- Premium
- Hot
- Hot
- Cool
- Cool
- Premium
- Premium
- Hot
- Hot
- Cool
- Cool
- Premium
- Premium
- HOT
- Hot
- COOL
- Cool
- PREMIUM
- Premium
- "Hot"
- Hot
- "Cool"
- Cool
- "Premium"
- Premium
AccountImmutabilityPolicyProperties, AccountImmutabilityPolicyPropertiesArgs        
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State
string | Pulumi.Azure Native. Storage. Account Immutability Policy State 
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State
string | AccountImmutability Policy State 
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod IntegerSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state
String | AccountImmutability Policy State 
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected booleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod numberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state
string | AccountImmutability Policy State 
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allow_protected_ boolappend_ writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutability_period_ intsince_ creation_ in_ days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state
str | AccountImmutability Policy State 
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod NumberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state String | "Unlocked" | "Locked" | "Disabled"
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
AccountImmutabilityPolicyPropertiesResponse, AccountImmutabilityPolicyPropertiesResponseArgs          
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- AllowProtected boolAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- ImmutabilityPeriod intSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- State string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod IntegerSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state String
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected booleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod numberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state string
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allow_protected_ boolappend_ writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutability_period_ intsince_ creation_ in_ days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state str
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
- allowProtected BooleanAppend Writes 
- This property can only be changed for disabled and unlocked time-based retention policies. When enabled, new blocks can be written to an append blob while maintaining immutability protection and compliance. Only new blocks can be added and any existing blocks cannot be modified or deleted.
- immutabilityPeriod NumberSince Creation In Days 
- The immutability period for the blobs in the container since the policy creation, in days.
- state String
- The ImmutabilityPolicy state defines the mode of the policy. Disabled state disables the policy, Unlocked state allows increase and decrease of immutability retention time and also allows toggling allowProtectedAppendWrites property, Locked state only allows the increase of the immutability retention time. A policy can only be created in a Disabled or Unlocked state and can be toggled between the two states. Only a policy in an Unlocked state can transition to a Locked state which cannot be reverted.
AccountImmutabilityPolicyState, AccountImmutabilityPolicyStateArgs        
- Unlocked
- Unlocked
- Locked
- Locked
- Disabled
- Disabled
- AccountImmutability Policy State Unlocked 
- Unlocked
- AccountImmutability Policy State Locked 
- Locked
- AccountImmutability Policy State Disabled 
- Disabled
- Unlocked
- Unlocked
- Locked
- Locked
- Disabled
- Disabled
- Unlocked
- Unlocked
- Locked
- Locked
- Disabled
- Disabled
- UNLOCKED
- Unlocked
- LOCKED
- Locked
- DISABLED
- Disabled
- "Unlocked"
- Unlocked
- "Locked"
- Locked
- "Disabled"
- Disabled
AccountType, AccountTypeArgs    
- User
- User
- Computer
- Computer
- AccountType User 
- User
- AccountType Computer 
- Computer
- User
- User
- Computer
- Computer
- User
- User
- Computer
- Computer
- USER
- User
- COMPUTER
- Computer
- "User"
- User
- "Computer"
- Computer
Action, ActionArgs  
- Allow
- Allow
- ActionAllow 
- Allow
- Allow
- Allow
- Allow
- Allow
- ALLOW
- Allow
- "Allow"
- Allow
ActiveDirectoryProperties, ActiveDirectoryPropertiesArgs      
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string | Pulumi.Azure Native. Storage. Account Type 
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string | AccountType 
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String | AccountType 
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid string
- Specifies the domain GUID.
- domainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType string | AccountType 
- Specifies the Active Directory account type for Azure Storage.
- azureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid string
- Specifies the security identifier (SID).
- forestName string
- Specifies the Active Directory forest to get.
- netBios stringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domain_guid str
- Specifies the domain GUID.
- domain_name str
- Specifies the primary domain that the AD DNS server is authoritative for.
- account_type str | AccountType 
- Specifies the Active Directory account type for Azure Storage.
- azure_storage_ strsid 
- Specifies the security identifier (SID) for Azure Storage.
- domain_sid str
- Specifies the security identifier (SID).
- forest_name str
- Specifies the Active Directory forest to get.
- net_bios_ strdomain_ name 
- Specifies the NetBIOS domain name.
- sam_account_ strname 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String | "User" | "Computer"
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
ActiveDirectoryPropertiesResponse, ActiveDirectoryPropertiesResponseArgs        
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- DomainGuid string
- Specifies the domain GUID.
- DomainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- AccountType string
- Specifies the Active Directory account type for Azure Storage.
- AzureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- DomainSid string
- Specifies the security identifier (SID).
- ForestName string
- Specifies the Active Directory forest to get.
- NetBios stringDomain Name 
- Specifies the NetBIOS domain name.
- SamAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid string
- Specifies the domain GUID.
- domainName string
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType string
- Specifies the Active Directory account type for Azure Storage.
- azureStorage stringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid string
- Specifies the security identifier (SID).
- forestName string
- Specifies the Active Directory forest to get.
- netBios stringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount stringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domain_guid str
- Specifies the domain GUID.
- domain_name str
- Specifies the primary domain that the AD DNS server is authoritative for.
- account_type str
- Specifies the Active Directory account type for Azure Storage.
- azure_storage_ strsid 
- Specifies the security identifier (SID) for Azure Storage.
- domain_sid str
- Specifies the security identifier (SID).
- forest_name str
- Specifies the Active Directory forest to get.
- net_bios_ strdomain_ name 
- Specifies the NetBIOS domain name.
- sam_account_ strname 
- Specifies the Active Directory SAMAccountName for Azure Storage.
- domainGuid String
- Specifies the domain GUID.
- domainName String
- Specifies the primary domain that the AD DNS server is authoritative for.
- accountType String
- Specifies the Active Directory account type for Azure Storage.
- azureStorage StringSid 
- Specifies the security identifier (SID) for Azure Storage.
- domainSid String
- Specifies the security identifier (SID).
- forestName String
- Specifies the Active Directory forest to get.
- netBios StringDomain Name 
- Specifies the NetBIOS domain name.
- samAccount StringName 
- Specifies the Active Directory SAMAccountName for Azure Storage.
AllowedCopyScope, AllowedCopyScopeArgs      
- PrivateLink 
- PrivateLink
- AAD
- AAD
- AllowedCopy Scope Private Link 
- PrivateLink
- AllowedCopy Scope AAD 
- AAD
- PrivateLink 
- PrivateLink
- AAD
- AAD
- PrivateLink 
- PrivateLink
- AAD
- AAD
- PRIVATE_LINK
- PrivateLink
- AAD
- AAD
- "PrivateLink" 
- PrivateLink
- "AAD"
- AAD
AzureFilesIdentityBasedAuthentication, AzureFilesIdentityBasedAuthenticationArgs          
- DirectoryService string | Pulumi.Options Azure Native. Storage. Directory Service Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory Pulumi.Properties Azure Native. Storage. Inputs. Active Directory Properties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
string | Pulumi.Azure Native. Storage. Default Share Permission 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- DirectoryService string | DirectoryOptions Service Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory ActiveProperties Directory Properties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
string | DefaultShare Permission 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService String | DirectoryOptions Service Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
String | DefaultShare Permission 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService string | DirectoryOptions Service Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
string | DefaultShare Permission 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directory_service_ str | Directoryoptions Service Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- active_directory_ Activeproperties Directory Properties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
str | DefaultShare Permission 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService String | "None" | "AADDS" | "AD" | "AADKERB"Options 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory Property MapProperties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- 
String | "None" | "StorageFile Data Smb Share Reader" | "Storage File Data Smb Share Contributor" | "Storage File Data Smb Share Elevated Contributor" 
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
AzureFilesIdentityBasedAuthenticationResponse, AzureFilesIdentityBasedAuthenticationResponseArgs            
- DirectoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory Pulumi.Properties Azure Native. Storage. Inputs. Active Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- DirectoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- ActiveDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService StringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- String
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService stringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory ActiveProperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- string
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directory_service_ stroptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- active_directory_ Activeproperties Directory Properties Response 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- str
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
- directoryService StringOptions 
- Indicates the directory service used. Note that this enum may be extended in the future.
- activeDirectory Property MapProperties 
- Required if directoryServiceOptions are AD, optional if they are AADKERB.
- String
- Default share permission for users using Kerberos authentication if RBAC role is not assigned.
BlobRestoreParametersResponse, BlobRestoreParametersResponseArgs        
- BlobRanges List<Pulumi.Azure Native. Storage. Inputs. Blob Restore Range Response> 
- Blob ranges to restore.
- TimeTo stringRestore 
- Restore blob to the specified time.
- BlobRanges []BlobRestore Range Response 
- Blob ranges to restore.
- TimeTo stringRestore 
- Restore blob to the specified time.
- blobRanges List<BlobRestore Range Response> 
- Blob ranges to restore.
- timeTo StringRestore 
- Restore blob to the specified time.
- blobRanges BlobRestore Range Response[] 
- Blob ranges to restore.
- timeTo stringRestore 
- Restore blob to the specified time.
- blob_ranges Sequence[BlobRestore Range Response] 
- Blob ranges to restore.
- time_to_ strrestore 
- Restore blob to the specified time.
- blobRanges List<Property Map>
- Blob ranges to restore.
- timeTo StringRestore 
- Restore blob to the specified time.
BlobRestoreRangeResponse, BlobRestoreRangeResponseArgs        
- EndRange string
- Blob end range. This is exclusive. Empty means account end.
- StartRange string
- Blob start range. This is inclusive. Empty means account start.
- EndRange string
- Blob end range. This is exclusive. Empty means account end.
- StartRange string
- Blob start range. This is inclusive. Empty means account start.
- endRange String
- Blob end range. This is exclusive. Empty means account end.
- startRange String
- Blob start range. This is inclusive. Empty means account start.
- endRange string
- Blob end range. This is exclusive. Empty means account end.
- startRange string
- Blob start range. This is inclusive. Empty means account start.
- end_range str
- Blob end range. This is exclusive. Empty means account end.
- start_range str
- Blob start range. This is inclusive. Empty means account start.
- endRange String
- Blob end range. This is exclusive. Empty means account end.
- startRange String
- Blob start range. This is inclusive. Empty means account start.
BlobRestoreStatusResponse, BlobRestoreStatusResponseArgs        
- FailureReason string
- Failure reason when blob restore is failed.
- Parameters
Pulumi.Azure Native. Storage. Inputs. Blob Restore Parameters Response 
- Blob restore request parameters.
- RestoreId string
- Id for tracking blob restore request.
- Status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- FailureReason string
- Failure reason when blob restore is failed.
- Parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- RestoreId string
- Id for tracking blob restore request.
- Status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason String
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restoreId String
- Id for tracking blob restore request.
- status String
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason string
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restoreId string
- Id for tracking blob restore request.
- status string
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failure_reason str
- Failure reason when blob restore is failed.
- parameters
BlobRestore Parameters Response 
- Blob restore request parameters.
- restore_id str
- Id for tracking blob restore request.
- status str
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
- failureReason String
- Failure reason when blob restore is failed.
- parameters Property Map
- Blob restore request parameters.
- restoreId String
- Id for tracking blob restore request.
- status String
- The status of blob restore progress. Possible values are: - InProgress: Indicates that blob restore is ongoing. - Complete: Indicates that blob restore has been completed successfully. - Failed: Indicates that blob restore is failed.
Bypass, BypassArgs  
- None
- None
- Logging
- Logging
- Metrics
- Metrics
- AzureServices 
- AzureServices
- BypassNone 
- None
- BypassLogging 
- Logging
- BypassMetrics 
- Metrics
- BypassAzure Services 
- AzureServices
- None
- None
- Logging
- Logging
- Metrics
- Metrics
- AzureServices 
- AzureServices
- None
- None
- Logging
- Logging
- Metrics
- Metrics
- AzureServices 
- AzureServices
- NONE
- None
- LOGGING
- Logging
- METRICS
- Metrics
- AZURE_SERVICES
- AzureServices
- "None"
- None
- "Logging"
- Logging
- "Metrics"
- Metrics
- "AzureServices" 
- AzureServices
CustomDomain, CustomDomainArgs    
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub booleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name str
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- use_sub_ booldomain_ name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
CustomDomainResponse, CustomDomainResponseArgs      
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- Name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- UseSub boolDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name string
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub booleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name str
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- use_sub_ booldomain_ name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
- name String
- Gets or sets the custom domain name assigned to the storage account. Name is the CNAME source.
- useSub BooleanDomain Name 
- Indicates whether indirect CName validation is enabled. Default value is false. This should only be set on updates.
DefaultAction, DefaultActionArgs    
- Allow
- Allow
- Deny
- Deny
- DefaultAction Allow 
- Allow
- DefaultAction Deny 
- Deny
- Allow
- Allow
- Deny
- Deny
- Allow
- Allow
- Deny
- Deny
- ALLOW
- Allow
- DENY
- Deny
- "Allow"
- Allow
- "Deny"
- Deny
DefaultSharePermission, DefaultSharePermissionArgs      
- None
- None
- StorageFile Data Smb Share Reader 
- StorageFileDataSmbShareReader
- StorageFile Data Smb Share Contributor 
- StorageFileDataSmbShareContributor
- StorageFile Data Smb Share Elevated Contributor 
- StorageFileDataSmbShareElevatedContributor
- DefaultShare Permission None 
- None
- DefaultShare Permission Storage File Data Smb Share Reader 
- StorageFileDataSmbShareReader
- DefaultShare Permission Storage File Data Smb Share Contributor 
- StorageFileDataSmbShareContributor
- DefaultShare Permission Storage File Data Smb Share Elevated Contributor 
- StorageFileDataSmbShareElevatedContributor
- None
- None
- StorageFile Data Smb Share Reader 
- StorageFileDataSmbShareReader
- StorageFile Data Smb Share Contributor 
- StorageFileDataSmbShareContributor
- StorageFile Data Smb Share Elevated Contributor 
- StorageFileDataSmbShareElevatedContributor
- None
- None
- StorageFile Data Smb Share Reader 
- StorageFileDataSmbShareReader
- StorageFile Data Smb Share Contributor 
- StorageFileDataSmbShareContributor
- StorageFile Data Smb Share Elevated Contributor 
- StorageFileDataSmbShareElevatedContributor
- NONE
- None
- STORAGE_FILE_DATA_SMB_SHARE_READER
- StorageFileDataSmbShareReader
- STORAGE_FILE_DATA_SMB_SHARE_CONTRIBUTOR
- StorageFileDataSmbShareContributor
- STORAGE_FILE_DATA_SMB_SHARE_ELEVATED_CONTRIBUTOR
- StorageFileDataSmbShareElevatedContributor
- "None"
- None
- "StorageFile Data Smb Share Reader" 
- StorageFileDataSmbShareReader
- "StorageFile Data Smb Share Contributor" 
- StorageFileDataSmbShareContributor
- "StorageFile Data Smb Share Elevated Contributor" 
- StorageFileDataSmbShareElevatedContributor
DirectoryServiceOptions, DirectoryServiceOptionsArgs      
- None
- None
- AADDS
- AADDS
- AD
- AD
- AADKERB
- AADKERB
- DirectoryService Options None 
- None
- DirectoryService Options AADDS 
- AADDS
- DirectoryService Options AD 
- AD
- DirectoryService Options AADKERB 
- AADKERB
- None
- None
- AADDS
- AADDS
- AD
- AD
- AADKERB
- AADKERB
- None
- None
- AADDS
- AADDS
- AD
- AD
- AADKERB
- AADKERB
- NONE
- None
- AADDS
- AADDS
- AD
- AD
- AADKERB
- AADKERB
- "None"
- None
- "AADDS"
- AADDS
- "AD"
- AD
- "AADKERB"
- AADKERB
DnsEndpointType, DnsEndpointTypeArgs      
- Standard
- Standard
- AzureDns Zone 
- AzureDnsZone
- DnsEndpoint Type Standard 
- Standard
- DnsEndpoint Type Azure Dns Zone 
- AzureDnsZone
- Standard
- Standard
- AzureDns Zone 
- AzureDnsZone
- Standard
- Standard
- AzureDns Zone 
- AzureDnsZone
- STANDARD
- Standard
- AZURE_DNS_ZONE
- AzureDnsZone
- "Standard"
- Standard
- "AzureDns Zone" 
- AzureDnsZone
Encryption, EncryptionArgs  
- EncryptionIdentity Pulumi.Azure Native. Storage. Inputs. Encryption Identity 
- The identity to be used with service-side encryption at rest.
- KeySource string | Pulumi.Azure Native. Storage. Key Source 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault Pulumi.Properties Azure Native. Storage. Inputs. Key Vault Properties 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
Pulumi.Azure Native. Storage. Inputs. Encryption Services 
- List of services which support encryption.
- EncryptionIdentity EncryptionIdentity 
- The identity to be used with service-side encryption at rest.
- KeySource string | KeySource 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault KeyProperties Vault Properties 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
EncryptionServices 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity 
- The identity to be used with service-side encryption at rest.
- keySource String | KeySource 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity 
- The identity to be used with service-side encryption at rest.
- keySource string | KeySource 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties 
- Properties provided by key vault.
- requireInfrastructure booleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices 
- List of services which support encryption.
- encryption_identity EncryptionIdentity 
- The identity to be used with service-side encryption at rest.
- key_source str | KeySource 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- key_vault_ Keyproperties Vault Properties 
- Properties provided by key vault.
- require_infrastructure_ boolencryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices 
- List of services which support encryption.
- encryptionIdentity Property Map
- The identity to be used with service-side encryption at rest.
- keySource String | "Microsoft.Storage" | "Microsoft. Keyvault" 
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault Property MapProperties 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services Property Map
- List of services which support encryption.
EncryptionIdentity, EncryptionIdentityArgs    
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryption_federated_ stridentity_ client_ id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryption_user_ strassigned_ identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
EncryptionIdentityResponse, EncryptionIdentityResponseArgs      
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- EncryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- EncryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated stringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser stringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryption_federated_ stridentity_ client_ id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryption_user_ strassigned_ identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
- encryptionFederated StringIdentity Client Id 
- ClientId of the multi-tenant application to be used in conjunction with the user-assigned identity for cross-tenant customer-managed-keys server-side encryption on the storage account.
- encryptionUser StringAssigned Identity 
- Resource identifier of the UserAssigned identity to be associated with server-side encryption on the storage account.
EncryptionResponse, EncryptionResponseArgs    
- EncryptionIdentity Pulumi.Azure Native. Storage. Inputs. Encryption Identity Response 
- The identity to be used with service-side encryption at rest.
- KeySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault Pulumi.Properties Azure Native. Storage. Inputs. Key Vault Properties Response 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
Pulumi.Azure Native. Storage. Inputs. Encryption Services Response 
- List of services which support encryption.
- EncryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- KeySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- KeyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- RequireInfrastructure boolEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- Services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- keySource String
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- keySource string
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault KeyProperties Vault Properties Response 
- Properties provided by key vault.
- requireInfrastructure booleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryption_identity EncryptionIdentity Response 
- The identity to be used with service-side encryption at rest.
- key_source str
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- key_vault_ Keyproperties Vault Properties Response 
- Properties provided by key vault.
- require_infrastructure_ boolencryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services
EncryptionServices Response 
- List of services which support encryption.
- encryptionIdentity Property Map
- The identity to be used with service-side encryption at rest.
- keySource String
- The encryption keySource (provider). Possible values (case-insensitive): Microsoft.Storage, Microsoft.Keyvault
- keyVault Property MapProperties 
- Properties provided by key vault.
- requireInfrastructure BooleanEncryption 
- A boolean indicating whether or not the service applies a secondary layer of encryption with platform managed keys for data at rest.
- services Property Map
- List of services which support encryption.
EncryptionService, EncryptionServiceArgs    
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string | Pulumi.Azure Native. Storage. Key Type 
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string | KeyType 
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String | KeyType 
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- enabled boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType string | KeyType 
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- key_type str | KeyType 
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String | "Service" | "Account"
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
EncryptionServiceResponse, EncryptionServiceResponseArgs      
- LastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- LastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- Enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- KeyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled StringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled stringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType string
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- last_enabled_ strtime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled bool
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- key_type str
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
- lastEnabled StringTime 
- Gets a rough estimate of the date/time when the encryption was last enabled by the user. Data is encrypted at rest by default today and cannot be disabled.
- enabled Boolean
- A boolean indicating whether or not the service encrypts the data as it is stored. Encryption at rest is enabled by default today and cannot be disabled.
- keyType String
- Encryption key type to be used for the encryption service. 'Account' key type implies that an account-scoped encryption key will be used. 'Service' key type implies that a default service key is used.
EncryptionServices, EncryptionServicesArgs    
- Blob
Pulumi.Azure Native. Storage. Inputs. Encryption Service 
- The encryption function of the blob storage service.
- File
Pulumi.Azure Native. Storage. Inputs. Encryption Service 
- The encryption function of the file storage service.
- Queue
Pulumi.Azure Native. Storage. Inputs. Encryption Service 
- The encryption function of the queue storage service.
- Table
Pulumi.Azure Native. Storage. Inputs. Encryption Service 
- The encryption function of the table storage service.
- Blob
EncryptionService 
- The encryption function of the blob storage service.
- File
EncryptionService 
- The encryption function of the file storage service.
- Queue
EncryptionService 
- The encryption function of the queue storage service.
- Table
EncryptionService 
- The encryption function of the table storage service.
- blob
EncryptionService 
- The encryption function of the blob storage service.
- file
EncryptionService 
- The encryption function of the file storage service.
- queue
EncryptionService 
- The encryption function of the queue storage service.
- table
EncryptionService 
- The encryption function of the table storage service.
- blob
EncryptionService 
- The encryption function of the blob storage service.
- file
EncryptionService 
- The encryption function of the file storage service.
- queue
EncryptionService 
- The encryption function of the queue storage service.
- table
EncryptionService 
- The encryption function of the table storage service.
- blob
EncryptionService 
- The encryption function of the blob storage service.
- file
EncryptionService 
- The encryption function of the file storage service.
- queue
EncryptionService 
- The encryption function of the queue storage service.
- table
EncryptionService 
- The encryption function of the table storage service.
- blob Property Map
- The encryption function of the blob storage service.
- file Property Map
- The encryption function of the file storage service.
- queue Property Map
- The encryption function of the queue storage service.
- table Property Map
- The encryption function of the table storage service.
EncryptionServicesResponse, EncryptionServicesResponseArgs      
- Blob
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the blob storage service.
- File
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the file storage service.
- Queue
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the queue storage service.
- Table
Pulumi.Azure Native. Storage. Inputs. Encryption Service Response 
- The encryption function of the table storage service.
- Blob
EncryptionService Response 
- The encryption function of the blob storage service.
- File
EncryptionService Response 
- The encryption function of the file storage service.
- Queue
EncryptionService Response 
- The encryption function of the queue storage service.
- Table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob
EncryptionService Response 
- The encryption function of the blob storage service.
- file
EncryptionService Response 
- The encryption function of the file storage service.
- queue
EncryptionService Response 
- The encryption function of the queue storage service.
- table
EncryptionService Response 
- The encryption function of the table storage service.
- blob Property Map
- The encryption function of the blob storage service.
- file Property Map
- The encryption function of the file storage service.
- queue Property Map
- The encryption function of the queue storage service.
- table Property Map
- The encryption function of the table storage service.
EndpointsResponse, EndpointsResponseArgs    
- Blob string
- Gets the blob endpoint.
- Dfs string
- Gets the dfs endpoint.
- File string
- Gets the file endpoint.
- Queue string
- Gets the queue endpoint.
- Table string
- Gets the table endpoint.
- Web string
- Gets the web endpoint.
- InternetEndpoints Pulumi.Azure Native. Storage. Inputs. Storage Account Internet Endpoints Response 
- Gets the internet routing storage endpoints
- MicrosoftEndpoints Pulumi.Azure Native. Storage. Inputs. Storage Account Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- Blob string
- Gets the blob endpoint.
- Dfs string
- Gets the dfs endpoint.
- File string
- Gets the file endpoint.
- Queue string
- Gets the queue endpoint.
- Table string
- Gets the table endpoint.
- Web string
- Gets the web endpoint.
- InternetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- MicrosoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob String
- Gets the blob endpoint.
- dfs String
- Gets the dfs endpoint.
- file String
- Gets the file endpoint.
- queue String
- Gets the queue endpoint.
- table String
- Gets the table endpoint.
- web String
- Gets the web endpoint.
- internetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob string
- Gets the blob endpoint.
- dfs string
- Gets the dfs endpoint.
- file string
- Gets the file endpoint.
- queue string
- Gets the queue endpoint.
- table string
- Gets the table endpoint.
- web string
- Gets the web endpoint.
- internetEndpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoftEndpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob str
- Gets the blob endpoint.
- dfs str
- Gets the dfs endpoint.
- file str
- Gets the file endpoint.
- queue str
- Gets the queue endpoint.
- table str
- Gets the table endpoint.
- web str
- Gets the web endpoint.
- internet_endpoints StorageAccount Internet Endpoints Response 
- Gets the internet routing storage endpoints
- microsoft_endpoints StorageAccount Microsoft Endpoints Response 
- Gets the microsoft routing storage endpoints.
- blob String
- Gets the blob endpoint.
- dfs String
- Gets the dfs endpoint.
- file String
- Gets the file endpoint.
- queue String
- Gets the queue endpoint.
- table String
- Gets the table endpoint.
- web String
- Gets the web endpoint.
- internetEndpoints Property Map
- Gets the internet routing storage endpoints
- microsoftEndpoints Property Map
- Gets the microsoft routing storage endpoints.
ExpirationAction, ExpirationActionArgs    
- Log
- Log
- ExpirationAction Log 
- Log
- Log
- Log
- Log
- Log
- LOG
- Log
- "Log"
- Log
ExtendedLocation, ExtendedLocationArgs    
- Name string
- The name of the extended location.
- Type
string | Pulumi.Azure Native. Storage. Extended Location Types 
- The type of the extended location.
- Name string
- The name of the extended location.
- Type
string | ExtendedLocation Types 
- The type of the extended location.
- name String
- The name of the extended location.
- type
String | ExtendedLocation Types 
- The type of the extended location.
- name string
- The name of the extended location.
- type
string | ExtendedLocation Types 
- The type of the extended location.
- name str
- The name of the extended location.
- type
str | ExtendedLocation Types 
- The type of the extended location.
- name String
- The name of the extended location.
- type
String | "EdgeZone" 
- The type of the extended location.
ExtendedLocationResponse, ExtendedLocationResponseArgs      
ExtendedLocationTypes, ExtendedLocationTypesArgs      
- EdgeZone 
- EdgeZone
- ExtendedLocation Types Edge Zone 
- EdgeZone
- EdgeZone 
- EdgeZone
- EdgeZone 
- EdgeZone
- EDGE_ZONE
- EdgeZone
- "EdgeZone" 
- EdgeZone
GeoReplicationStatsResponse, GeoReplicationStatsResponseArgs        
- CanFailover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- LastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- Status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- CanFailover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- LastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- Status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover Boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync StringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status String
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync stringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status string
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- can_failover bool
- A boolean flag which indicates whether or not account failover is supported for the account.
- last_sync_ strtime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status str
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
- canFailover Boolean
- A boolean flag which indicates whether or not account failover is supported for the account.
- lastSync StringTime 
- All primary writes preceding this UTC date/time value are guaranteed to be available for read operations. Primary writes following this point in time may or may not be available for reads. Element may be default value if value of LastSyncTime is not available, this can happen if secondary is offline or we are in bootstrap.
- status String
- The status of the secondary location. Possible values are: - Live: Indicates that the secondary location is active and operational. - Bootstrap: Indicates initial synchronization from the primary location to the secondary location is in progress.This typically occurs when replication is first enabled. - Unavailable: Indicates that the secondary location is temporarily unavailable.
IPRule, IPRuleArgs  
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action
Pulumi.Azure Native. Storage. Action 
- The action of IP ACL rule.
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action Action
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action Action
- The action of IP ACL rule.
- iPAddress stringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action Action
- The action of IP ACL rule.
- i_p_ straddress_ or_ range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action Action
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action "Allow"
- The action of IP ACL rule.
IPRuleResponse, IPRuleResponseArgs    
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action string
- The action of IP ACL rule.
- IPAddressOr stringRange 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- Action string
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action String
- The action of IP ACL rule.
- iPAddress stringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action string
- The action of IP ACL rule.
- i_p_ straddress_ or_ range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action str
- The action of IP ACL rule.
- iPAddress StringOr Range 
- Specifies the IP or IP range in CIDR format. Only IPV4 address is allowed.
- action String
- The action of IP ACL rule.
Identity, IdentityArgs  
- Type
string | Pulumi.Azure Native. Storage. Identity Type 
- The identity type.
- UserAssigned List<string>Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- Type
string | IdentityType 
- The identity type.
- UserAssigned []stringIdentities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- type
String | IdentityType 
- The identity type.
- userAssigned List<String>Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- type
string | IdentityType 
- The identity type.
- userAssigned string[]Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- type
str | IdentityType 
- The identity type.
- user_assigned_ Sequence[str]identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- type
String | "None" | "SystemAssigned" | "User Assigned" | "System Assigned,User Assigned" 
- The identity type.
- userAssigned List<String>Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
IdentityResponse, IdentityResponseArgs    
- PrincipalId string
- The principal ID of resource identity.
- TenantId string
- The tenant ID of resource.
- Type string
- The identity type.
- UserAssigned Dictionary<string, Pulumi.Identities Azure Native. Storage. Inputs. User Assigned Identity Response> 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- PrincipalId string
- The principal ID of resource identity.
- TenantId string
- The tenant ID of resource.
- Type string
- The identity type.
- UserAssigned map[string]UserIdentities Assigned Identity Response 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId String
- The principal ID of resource identity.
- tenantId String
- The tenant ID of resource.
- type String
- The identity type.
- userAssigned Map<String,UserIdentities Assigned Identity Response> 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId string
- The principal ID of resource identity.
- tenantId string
- The tenant ID of resource.
- type string
- The identity type.
- userAssigned {[key: string]: UserIdentities Assigned Identity Response} 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principal_id str
- The principal ID of resource identity.
- tenant_id str
- The tenant ID of resource.
- type str
- The identity type.
- user_assigned_ Mapping[str, Useridentities Assigned Identity Response] 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
- principalId String
- The principal ID of resource identity.
- tenantId String
- The tenant ID of resource.
- type String
- The identity type.
- userAssigned Map<Property Map>Identities 
- Gets or sets a list of key value pairs that describe the set of User Assigned identities that will be used with this storage account. The key is the ARM resource identifier of the identity. Only 1 User Assigned identity is permitted here.
IdentityType, IdentityTypeArgs    
- None
- None
- SystemAssigned 
- SystemAssigned
- UserAssigned 
- UserAssigned
- SystemAssigned_User Assigned 
- SystemAssigned,UserAssigned
- IdentityType None 
- None
- IdentityType System Assigned 
- SystemAssigned
- IdentityType User Assigned 
- UserAssigned
- IdentityType_System Assigned_User Assigned 
- SystemAssigned,UserAssigned
- None
- None
- SystemAssigned 
- SystemAssigned
- UserAssigned 
- UserAssigned
- SystemAssigned_User Assigned 
- SystemAssigned,UserAssigned
- None
- None
- SystemAssigned 
- SystemAssigned
- UserAssigned 
- UserAssigned
- SystemAssigned_User Assigned 
- SystemAssigned,UserAssigned
- NONE
- None
- SYSTEM_ASSIGNED
- SystemAssigned
- USER_ASSIGNED
- UserAssigned
- SYSTEM_ASSIGNED_USER_ASSIGNED
- SystemAssigned,UserAssigned
- "None"
- None
- "SystemAssigned" 
- SystemAssigned
- "UserAssigned" 
- UserAssigned
- "SystemAssigned,User Assigned" 
- SystemAssigned,UserAssigned
ImmutableStorageAccount, ImmutableStorageAccountArgs      
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy Pulumi.Azure Native. Storage. Inputs. Account Immutability Policy Properties 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy AccountImmutability Policy Properties 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutability_policy AccountImmutability Policy Properties 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy Property Map
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
ImmutableStorageAccountResponse, ImmutableStorageAccountResponseArgs        
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy Pulumi.Azure Native. Storage. Inputs. Account Immutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- Enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- ImmutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled bool
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutability_policy AccountImmutability Policy Properties Response 
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
- enabled Boolean
- A boolean flag which enables account-level immutability. All the containers under such an account have object-level immutability enabled by default.
- immutabilityPolicy Property Map
- Specifies the default account-level immutability policy which is inherited and applied to objects that do not possess an explicit immutability policy at the object level. The object-level immutability policy has higher precedence than the container-level immutability policy, which has a higher precedence than the account-level immutability policy.
KeyCreationTimeResponse, KeyCreationTimeResponseArgs        
KeyPolicy, KeyPolicyArgs    
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- keyExpiration IntegerPeriod In Days 
- The key expiration period in days.
- keyExpiration numberPeriod In Days 
- The key expiration period in days.
- key_expiration_ intperiod_ in_ days 
- The key expiration period in days.
- keyExpiration NumberPeriod In Days 
- The key expiration period in days.
KeyPolicyResponse, KeyPolicyResponseArgs      
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- KeyExpiration intPeriod In Days 
- The key expiration period in days.
- keyExpiration IntegerPeriod In Days 
- The key expiration period in days.
- keyExpiration numberPeriod In Days 
- The key expiration period in days.
- key_expiration_ intperiod_ in_ days 
- The key expiration period in days.
- keyExpiration NumberPeriod In Days 
- The key expiration period in days.
KeySource, KeySourceArgs    
- Microsoft_Storage
- Microsoft.Storage
- Microsoft_Keyvault
- Microsoft.Keyvault
- KeySource_Microsoft_Storage 
- Microsoft.Storage
- KeySource_Microsoft_Keyvault 
- Microsoft.Keyvault
- Microsoft_Storage
- Microsoft.Storage
- Microsoft_Keyvault
- Microsoft.Keyvault
- Microsoft_Storage
- Microsoft.Storage
- Microsoft_Keyvault
- Microsoft.Keyvault
- MICROSOFT_STORAGE
- Microsoft.Storage
- MICROSOFT_KEYVAULT
- Microsoft.Keyvault
- "Microsoft.Storage" 
- Microsoft.Storage
- "Microsoft.Keyvault" 
- Microsoft.Keyvault
KeyType, KeyTypeArgs    
- Service
- Service
- Account
- Account
- KeyType Service 
- Service
- KeyType Account 
- Account
- Service
- Service
- Account
- Account
- Service
- Service
- Account
- Account
- SERVICE
- Service
- ACCOUNT
- Account
- "Service"
- Service
- "Account"
- Account
KeyVaultProperties, KeyVaultPropertiesArgs      
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
- keyName string
- The name of KeyVault key.
- keyVault stringUri 
- The Uri of KeyVault.
- keyVersion string
- The version of KeyVault key.
- key_name str
- The name of KeyVault key.
- key_vault_ struri 
- The Uri of KeyVault.
- key_version str
- The version of KeyVault key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
KeyVaultPropertiesResponse, KeyVaultPropertiesResponseArgs        
- CurrentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- CurrentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- LastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- CurrentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- CurrentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- LastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- KeyName string
- The name of KeyVault key.
- KeyVault stringUri 
- The Uri of KeyVault.
- KeyVersion string
- The version of KeyVault key.
- currentVersioned StringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned StringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey StringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
- currentVersioned stringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned stringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey stringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName string
- The name of KeyVault key.
- keyVault stringUri 
- The Uri of KeyVault.
- keyVersion string
- The version of KeyVault key.
- current_versioned_ strkey_ expiration_ timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- current_versioned_ strkey_ identifier 
- The object identifier of the current versioned Key Vault Key in use.
- last_key_ strrotation_ timestamp 
- Timestamp of last rotation of the Key Vault Key.
- key_name str
- The name of KeyVault key.
- key_vault_ struri 
- The Uri of KeyVault.
- key_version str
- The version of KeyVault key.
- currentVersioned StringKey Expiration Timestamp 
- This is a read only property that represents the expiration time of the current version of the customer managed key used for encryption.
- currentVersioned StringKey Identifier 
- The object identifier of the current versioned Key Vault Key in use.
- lastKey StringRotation Timestamp 
- Timestamp of last rotation of the Key Vault Key.
- keyName String
- The name of KeyVault key.
- keyVault StringUri 
- The Uri of KeyVault.
- keyVersion String
- The version of KeyVault key.
Kind, KindArgs  
- Storage
- Storage
- StorageV2 
- StorageV2
- BlobStorage 
- BlobStorage
- FileStorage 
- FileStorage
- BlockBlob Storage 
- BlockBlobStorage
- KindStorage 
- Storage
- KindStorage V2 
- StorageV2
- KindBlob Storage 
- BlobStorage
- KindFile Storage 
- FileStorage
- KindBlock Blob Storage 
- BlockBlobStorage
- Storage
- Storage
- StorageV2 
- StorageV2
- BlobStorage 
- BlobStorage
- FileStorage 
- FileStorage
- BlockBlob Storage 
- BlockBlobStorage
- Storage
- Storage
- StorageV2 
- StorageV2
- BlobStorage 
- BlobStorage
- FileStorage 
- FileStorage
- BlockBlob Storage 
- BlockBlobStorage
- STORAGE
- Storage
- STORAGE_V2
- StorageV2
- BLOB_STORAGE
- BlobStorage
- FILE_STORAGE
- FileStorage
- BLOCK_BLOB_STORAGE
- BlockBlobStorage
- "Storage"
- Storage
- "StorageV2" 
- StorageV2
- "BlobStorage" 
- BlobStorage
- "FileStorage" 
- FileStorage
- "BlockBlob Storage" 
- BlockBlobStorage
LargeFileSharesState, LargeFileSharesStateArgs        
- Disabled
- Disabled
- Enabled
- Enabled
- LargeFile Shares State Disabled 
- Disabled
- LargeFile Shares State Enabled 
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- DISABLED
- Disabled
- ENABLED
- Enabled
- "Disabled"
- Disabled
- "Enabled"
- Enabled
MinimumTlsVersion, MinimumTlsVersionArgs      
- TLS1_0
- TLS1_0
- TLS1_1
- TLS1_1
- TLS1_2
- TLS1_2
- MinimumTls Version_TLS1_0 
- TLS1_0
- MinimumTls Version_TLS1_1 
- TLS1_1
- MinimumTls Version_TLS1_2 
- TLS1_2
- TLS1_0
- TLS1_0
- TLS1_1
- TLS1_1
- TLS1_2
- TLS1_2
- TLS1_0
- TLS1_0
- TLS1_1
- TLS1_1
- TLS1_2
- TLS1_2
- TLS1_0
- TLS1_0
- TLS1_1
- TLS1_1
- TLS1_2
- TLS1_2
- "TLS1_0"
- TLS1_0
- "TLS1_1"
- TLS1_1
- "TLS1_2"
- TLS1_2
NetworkRuleSet, NetworkRuleSetArgs      
- DefaultAction Pulumi.Azure Native. Storage. Default Action 
- Specifies the default action of allow or deny when no other rules match.
- Bypass
string | Pulumi.Azure Native. Storage. Bypass 
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules List<Pulumi.Azure Native. Storage. Inputs. IPRule> 
- Sets the IP ACL rules
- ResourceAccess List<Pulumi.Rules Azure Native. Storage. Inputs. Resource Access Rule> 
- Sets the resource access rules
- VirtualNetwork List<Pulumi.Rules Azure Native. Storage. Inputs. Virtual Network Rule> 
- Sets the virtual network rules
- DefaultAction DefaultAction 
- Specifies the default action of allow or deny when no other rules match.
- Bypass string | Bypass
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules []IPRule
- Sets the IP ACL rules
- ResourceAccess []ResourceRules Access Rule 
- Sets the resource access rules
- VirtualNetwork []VirtualRules Network Rule 
- Sets the virtual network rules
- defaultAction DefaultAction 
- Specifies the default action of allow or deny when no other rules match.
- bypass String | Bypass
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<IPRule>
- Sets the IP ACL rules
- resourceAccess List<ResourceRules Access Rule> 
- Sets the resource access rules
- virtualNetwork List<VirtualRules Network Rule> 
- Sets the virtual network rules
- defaultAction DefaultAction 
- Specifies the default action of allow or deny when no other rules match.
- bypass string | Bypass
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules IPRule[]
- Sets the IP ACL rules
- resourceAccess ResourceRules Access Rule[] 
- Sets the resource access rules
- virtualNetwork VirtualRules Network Rule[] 
- Sets the virtual network rules
- default_action DefaultAction 
- Specifies the default action of allow or deny when no other rules match.
- bypass str | Bypass
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ip_rules Sequence[IPRule]
- Sets the IP ACL rules
- resource_access_ Sequence[Resourcerules Access Rule] 
- Sets the resource access rules
- virtual_network_ Sequence[Virtualrules Network Rule] 
- Sets the virtual network rules
- defaultAction "Allow" | "Deny"
- Specifies the default action of allow or deny when no other rules match.
- bypass
String | "None" | "Logging" | "Metrics" | "AzureServices" 
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<Property Map>
- Sets the IP ACL rules
- resourceAccess List<Property Map>Rules 
- Sets the resource access rules
- virtualNetwork List<Property Map>Rules 
- Sets the virtual network rules
NetworkRuleSetResponse, NetworkRuleSetResponseArgs        
- DefaultAction string
- Specifies the default action of allow or deny when no other rules match.
- Bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules List<Pulumi.Azure Native. Storage. Inputs. IPRule Response> 
- Sets the IP ACL rules
- ResourceAccess List<Pulumi.Rules Azure Native. Storage. Inputs. Resource Access Rule Response> 
- Sets the resource access rules
- VirtualNetwork List<Pulumi.Rules Azure Native. Storage. Inputs. Virtual Network Rule Response> 
- Sets the virtual network rules
- DefaultAction string
- Specifies the default action of allow or deny when no other rules match.
- Bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- IpRules []IPRuleResponse 
- Sets the IP ACL rules
- ResourceAccess []ResourceRules Access Rule Response 
- Sets the resource access rules
- VirtualNetwork []VirtualRules Network Rule Response 
- Sets the virtual network rules
- defaultAction String
- Specifies the default action of allow or deny when no other rules match.
- bypass String
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<IPRuleResponse> 
- Sets the IP ACL rules
- resourceAccess List<ResourceRules Access Rule Response> 
- Sets the resource access rules
- virtualNetwork List<VirtualRules Network Rule Response> 
- Sets the virtual network rules
- defaultAction string
- Specifies the default action of allow or deny when no other rules match.
- bypass string
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules IPRuleResponse[] 
- Sets the IP ACL rules
- resourceAccess ResourceRules Access Rule Response[] 
- Sets the resource access rules
- virtualNetwork VirtualRules Network Rule Response[] 
- Sets the virtual network rules
- default_action str
- Specifies the default action of allow or deny when no other rules match.
- bypass str
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ip_rules Sequence[IPRuleResponse] 
- Sets the IP ACL rules
- resource_access_ Sequence[Resourcerules Access Rule Response] 
- Sets the resource access rules
- virtual_network_ Sequence[Virtualrules Network Rule Response] 
- Sets the virtual network rules
- defaultAction String
- Specifies the default action of allow or deny when no other rules match.
- bypass String
- Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. Possible values are any combination of Logging|Metrics|AzureServices (For example, "Logging, Metrics"), or None to bypass none of those traffics.
- ipRules List<Property Map>
- Sets the IP ACL rules
- resourceAccess List<Property Map>Rules 
- Sets the resource access rules
- virtualNetwork List<Property Map>Rules 
- Sets the virtual network rules
PrivateEndpointConnectionResponse, PrivateEndpointConnectionResponseArgs        
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- Name string
- The name of the resource
- PrivateLink Pulumi.Service Connection State Azure Native. Storage. Inputs. Private Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- ProvisioningState string
- The provisioning state of the private endpoint connection resource.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- PrivateEndpoint Pulumi.Azure Native. Storage. Inputs. Private Endpoint Response 
- The resource of private end point.
- Id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- Name string
- The name of the resource
- PrivateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- ProvisioningState string
- The provisioning state of the private endpoint connection resource.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- PrivateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name String
- The name of the resource
- privateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState String
- The provisioning state of the private endpoint connection resource.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id string
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name string
- The name of the resource
- privateLink PrivateService Connection State Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState string
- The provisioning state of the private endpoint connection resource.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint PrivateEndpoint Response 
- The resource of private end point.
- id str
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name str
- The name of the resource
- private_link_ Privateservice_ connection_ state Link Service Connection State Response 
- A collection of information about the state of the connection between service consumer and provider.
- provisioning_state str
- The provisioning state of the private endpoint connection resource.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- private_endpoint PrivateEndpoint Response 
- The resource of private end point.
- id String
- Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
- name String
- The name of the resource
- privateLink Property MapService Connection State 
- A collection of information about the state of the connection between service consumer and provider.
- provisioningState String
- The provisioning state of the private endpoint connection resource.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- privateEndpoint Property Map
- The resource of private end point.
PrivateEndpointResponse, PrivateEndpointResponseArgs      
- Id string
- The ARM identifier for Private Endpoint
- Id string
- The ARM identifier for Private Endpoint
- id String
- The ARM identifier for Private Endpoint
- id string
- The ARM identifier for Private Endpoint
- id str
- The ARM identifier for Private Endpoint
- id String
- The ARM identifier for Private Endpoint
PrivateLinkServiceConnectionStateResponse, PrivateLinkServiceConnectionStateResponseArgs            
- ActionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- Description string
- The reason for approval/rejection of the connection.
- Status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- ActionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- Description string
- The reason for approval/rejection of the connection.
- Status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired String
- A message indicating if changes on the service provider require any updates on the consumer.
- description String
- The reason for approval/rejection of the connection.
- status String
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired string
- A message indicating if changes on the service provider require any updates on the consumer.
- description string
- The reason for approval/rejection of the connection.
- status string
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- action_required str
- A message indicating if changes on the service provider require any updates on the consumer.
- description str
- The reason for approval/rejection of the connection.
- status str
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
- actionRequired String
- A message indicating if changes on the service provider require any updates on the consumer.
- description String
- The reason for approval/rejection of the connection.
- status String
- Indicates whether the connection has been Approved/Rejected/Removed by the owner of the service.
PublicNetworkAccess, PublicNetworkAccessArgs      
- Enabled
- Enabled
- Disabled
- Disabled
- PublicNetwork Access Enabled 
- Enabled
- PublicNetwork Access Disabled 
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- Enabled
- Enabled
- Disabled
- Disabled
- ENABLED
- Enabled
- DISABLED
- Disabled
- "Enabled"
- Enabled
- "Disabled"
- Disabled
ResourceAccessRule, ResourceAccessRuleArgs      
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
- resourceId string
- Resource Id
- tenantId string
- Tenant Id
- resource_id str
- Resource Id
- tenant_id str
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
ResourceAccessRuleResponse, ResourceAccessRuleResponseArgs        
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- ResourceId string
- Resource Id
- TenantId string
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
- resourceId string
- Resource Id
- tenantId string
- Tenant Id
- resource_id str
- Resource Id
- tenant_id str
- Tenant Id
- resourceId String
- Resource Id
- tenantId String
- Tenant Id
RoutingChoice, RoutingChoiceArgs    
- MicrosoftRouting 
- MicrosoftRouting
- InternetRouting 
- InternetRouting
- RoutingChoice Microsoft Routing 
- MicrosoftRouting
- RoutingChoice Internet Routing 
- InternetRouting
- MicrosoftRouting 
- MicrosoftRouting
- InternetRouting 
- InternetRouting
- MicrosoftRouting 
- MicrosoftRouting
- InternetRouting 
- InternetRouting
- MICROSOFT_ROUTING
- MicrosoftRouting
- INTERNET_ROUTING
- InternetRouting
- "MicrosoftRouting" 
- MicrosoftRouting
- "InternetRouting" 
- InternetRouting
RoutingPreference, RoutingPreferenceArgs    
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string | Pulumi.Azure Native. Storage. Routing Choice 
- Routing Choice defines the kind of network routing opted by the user.
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string | RoutingChoice 
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String | RoutingChoice 
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet booleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft booleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice string | RoutingChoice 
- Routing Choice defines the kind of network routing opted by the user.
- publish_internet_ boolendpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publish_microsoft_ boolendpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routing_choice str | RoutingChoice 
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String | "MicrosoftRouting" | "Internet Routing" 
- Routing Choice defines the kind of network routing opted by the user.
RoutingPreferenceResponse, RoutingPreferenceResponseArgs      
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- PublishInternet boolEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- PublishMicrosoft boolEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- RoutingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet booleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft booleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice string
- Routing Choice defines the kind of network routing opted by the user.
- publish_internet_ boolendpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publish_microsoft_ boolendpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routing_choice str
- Routing Choice defines the kind of network routing opted by the user.
- publishInternet BooleanEndpoints 
- A boolean flag which indicates whether internet routing storage endpoints are to be published
- publishMicrosoft BooleanEndpoints 
- A boolean flag which indicates whether microsoft routing storage endpoints are to be published
- routingChoice String
- Routing Choice defines the kind of network routing opted by the user.
SasPolicy, SasPolicyArgs    
- ExpirationAction string | Pulumi.Azure Native. Storage. Expiration Action 
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- ExpirationAction string | ExpirationAction 
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String | ExpirationAction 
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction string | ExpirationAction 
- The SAS expiration action. Can only be Log.
- sasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expiration_action str | ExpirationAction 
- The SAS expiration action. Can only be Log.
- sas_expiration_ strperiod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String | "Log"
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
SasPolicyResponse, SasPolicyResponseArgs      
- ExpirationAction string
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- ExpirationAction string
- The SAS expiration action. Can only be Log.
- SasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction string
- The SAS expiration action. Can only be Log.
- sasExpiration stringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
- expiration_action str
- The SAS expiration action. Can only be Log.
- sas_expiration_ strperiod 
- The SAS expiration period, DD.HH:MM:SS.
- expirationAction String
- The SAS expiration action. Can only be Log.
- sasExpiration StringPeriod 
- The SAS expiration period, DD.HH:MM:SS.
Sku, SkuArgs  
- Name
string | Pulumi.Azure Native. Storage. Sku Name 
- The SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType.
- name String | "Standard_LRS" | "Standard_GRS" | "Standard_RAGRS" | "Standard_ZRS" | "Premium_LRS" | "Premium_ZRS" | "Standard_GZRS" | "Standard_RAGZRS"
- The SKU name. Required for account creation; optional for update. Note that in older versions, SKU name was called accountType.
SkuName, SkuNameArgs    
- Standard_LRS
- Standard_LRS
- Standard_GRS
- Standard_GRS
- Standard_RAGRS
- Standard_RAGRS
- Standard_ZRS
- Standard_ZRS
- Premium_LRS
- Premium_LRS
- Premium_ZRS
- Premium_ZRS
- Standard_GZRS
- Standard_GZRS
- Standard_RAGZRS
- Standard_RAGZRS
- SkuName_Standard_LRS 
- Standard_LRS
- SkuName_Standard_GRS 
- Standard_GRS
- SkuName_Standard_RAGRS 
- Standard_RAGRS
- SkuName_Standard_ZRS 
- Standard_ZRS
- SkuName_Premium_LRS 
- Premium_LRS
- SkuName_Premium_ZRS 
- Premium_ZRS
- SkuName_Standard_GZRS 
- Standard_GZRS
- SkuName_Standard_RAGZRS 
- Standard_RAGZRS
- Standard_LRS
- Standard_LRS
- Standard_GRS
- Standard_GRS
- Standard_RAGRS
- Standard_RAGRS
- Standard_ZRS
- Standard_ZRS
- Premium_LRS
- Premium_LRS
- Premium_ZRS
- Premium_ZRS
- Standard_GZRS
- Standard_GZRS
- Standard_RAGZRS
- Standard_RAGZRS
- Standard_LRS
- Standard_LRS
- Standard_GRS
- Standard_GRS
- Standard_RAGRS
- Standard_RAGRS
- Standard_ZRS
- Standard_ZRS
- Premium_LRS
- Premium_LRS
- Premium_ZRS
- Premium_ZRS
- Standard_GZRS
- Standard_GZRS
- Standard_RAGZRS
- Standard_RAGZRS
- STANDARD_LRS
- Standard_LRS
- STANDARD_GRS
- Standard_GRS
- STANDARD_RAGRS
- Standard_RAGRS
- STANDARD_ZRS
- Standard_ZRS
- PREMIUM_LRS
- Premium_LRS
- PREMIUM_ZRS
- Premium_ZRS
- STANDARD_GZRS
- Standard_GZRS
- STANDARD_RAGZRS
- Standard_RAGZRS
- "Standard_LRS"
- Standard_LRS
- "Standard_GRS"
- Standard_GRS
- "Standard_RAGRS"
- Standard_RAGRS
- "Standard_ZRS"
- Standard_ZRS
- "Premium_LRS"
- Premium_LRS
- "Premium_ZRS"
- Premium_ZRS
- "Standard_GZRS"
- Standard_GZRS
- "Standard_RAGZRS"
- Standard_RAGZRS
SkuResponse, SkuResponseArgs    
State, StateArgs  
- Provisioning
- Provisioning
- Deprovisioning
- Deprovisioning
- Succeeded
- Succeeded
- Failed
- Failed
- NetworkSource Deleted 
- NetworkSourceDeleted
- StateProvisioning 
- Provisioning
- StateDeprovisioning 
- Deprovisioning
- StateSucceeded 
- Succeeded
- StateFailed 
- Failed
- StateNetwork Source Deleted 
- NetworkSourceDeleted
- Provisioning
- Provisioning
- Deprovisioning
- Deprovisioning
- Succeeded
- Succeeded
- Failed
- Failed
- NetworkSource Deleted 
- NetworkSourceDeleted
- Provisioning
- Provisioning
- Deprovisioning
- Deprovisioning
- Succeeded
- Succeeded
- Failed
- Failed
- NetworkSource Deleted 
- NetworkSourceDeleted
- PROVISIONING
- Provisioning
- DEPROVISIONING
- Deprovisioning
- SUCCEEDED
- Succeeded
- FAILED
- Failed
- NETWORK_SOURCE_DELETED
- NetworkSourceDeleted
- "Provisioning"
- Provisioning
- "Deprovisioning"
- Deprovisioning
- "Succeeded"
- Succeeded
- "Failed"
- Failed
- "NetworkSource Deleted" 
- NetworkSourceDeleted
StorageAccountInternetEndpointsResponse, StorageAccountInternetEndpointsResponseArgs          
StorageAccountMicrosoftEndpointsResponse, StorageAccountMicrosoftEndpointsResponseArgs          
StorageAccountSkuConversionStatusResponse, StorageAccountSkuConversionStatusResponseArgs            
- EndTime string
- This property represents the sku conversion end time.
- SkuConversion stringStatus 
- This property indicates the current sku conversion status.
- StartTime string
- This property represents the sku conversion start time.
- TargetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- EndTime string
- This property represents the sku conversion end time.
- SkuConversion stringStatus 
- This property indicates the current sku conversion status.
- StartTime string
- This property represents the sku conversion start time.
- TargetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime String
- This property represents the sku conversion end time.
- skuConversion StringStatus 
- This property indicates the current sku conversion status.
- startTime String
- This property represents the sku conversion start time.
- targetSku StringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime string
- This property represents the sku conversion end time.
- skuConversion stringStatus 
- This property indicates the current sku conversion status.
- startTime string
- This property represents the sku conversion start time.
- targetSku stringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- end_time str
- This property represents the sku conversion end time.
- sku_conversion_ strstatus 
- This property indicates the current sku conversion status.
- start_time str
- This property represents the sku conversion start time.
- target_sku_ strname 
- This property represents the target sku name to which the account sku is being converted asynchronously.
- endTime String
- This property represents the sku conversion end time.
- skuConversion StringStatus 
- This property indicates the current sku conversion status.
- startTime String
- This property represents the sku conversion start time.
- targetSku StringName 
- This property represents the target sku name to which the account sku is being converted asynchronously.
UserAssignedIdentityResponse, UserAssignedIdentityResponseArgs        
- ClientId string
- The client ID of the identity.
- PrincipalId string
- The principal ID of the identity.
- ClientId string
- The client ID of the identity.
- PrincipalId string
- The principal ID of the identity.
- clientId String
- The client ID of the identity.
- principalId String
- The principal ID of the identity.
- clientId string
- The client ID of the identity.
- principalId string
- The principal ID of the identity.
- client_id str
- The client ID of the identity.
- principal_id str
- The principal ID of the identity.
- clientId String
- The client ID of the identity.
- principalId String
- The principal ID of the identity.
VirtualNetworkRule, VirtualNetworkRuleArgs      
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action
Pulumi.Azure Native. Storage. Action 
- The action of virtual network rule.
- State
string | Pulumi.Azure Native. Storage. State 
- Gets the state of virtual network rule.
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action Action
- The action of virtual network rule.
- State string | State
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action Action
- The action of virtual network rule.
- state String | State
- Gets the state of virtual network rule.
- virtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action Action
- The action of virtual network rule.
- state string | State
- Gets the state of virtual network rule.
- virtual_network_ strresource_ id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action Action
- The action of virtual network rule.
- state str | State
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action "Allow"
- The action of virtual network rule.
- state
String | "Provisioning" | "Deprovisioning" | "Succeeded" | "Failed" | "NetworkSource Deleted" 
- Gets the state of virtual network rule.
VirtualNetworkRuleResponse, VirtualNetworkRuleResponseArgs        
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action string
- The action of virtual network rule.
- State string
- Gets the state of virtual network rule.
- VirtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- Action string
- The action of virtual network rule.
- State string
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action String
- The action of virtual network rule.
- state String
- Gets the state of virtual network rule.
- virtualNetwork stringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action string
- The action of virtual network rule.
- state string
- Gets the state of virtual network rule.
- virtual_network_ strresource_ id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action str
- The action of virtual network rule.
- state str
- Gets the state of virtual network rule.
- virtualNetwork StringResource Id 
- Resource ID of a subnet, for example: /subscriptions/{subscriptionId}/resourceGroups/{groupName}/providers/Microsoft.Network/virtualNetworks/{vnetName}/subnets/{subnetName}.
- action String
- The action of virtual network rule.
- state String
- Gets the state of virtual network rule.
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:storage:StorageAccount sto4445 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Storage/storageAccounts/{accountName} 
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0