keyvault

package
v5.74.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 29, 2024 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AccessPolicy

type AccessPolicy struct {
	pulumi.CustomResourceState

	// The object ID of an Application in Azure Active Directory. Changing this forces a new resource to be created.
	ApplicationId pulumi.StringPtrOutput `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
	CertificatePermissions pulumi.StringArrayOutput `pulumi:"certificatePermissions"`
	// List of key permissions, must be one or more from the following: `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
	KeyPermissions pulumi.StringArrayOutput `pulumi:"keyPermissions"`
	// Specifies the id of the Key Vault resource. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID of a service principal can be fetched from `azuread_service_principal.object_id`. The object ID must be unique for the list of access policies. Changing this forces a new resource to be created.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
	SecretPermissions pulumi.StringArrayOutput `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
	StoragePermissions pulumi.StringArrayOutput `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Changing this forces a new resource to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Key Vault Access Policy.

> **NOTE:** It's possible to define Key Vault Access Policies both within the `keyvault.KeyVault` resource via the `accessPolicy` block and by using the `keyvault.AccessPolicy` resource. However it's not possible to use both methods to manage Access Policies within a KeyVault, since there'll be conflicts.

> **NOTE:** Azure permits a maximum of 1024 Access Policies per Key Vault - [more information can be found in this document](https://docs.microsoft.com/azure/key-vault/key-vault-secure-your-key-vault#data-plane-access-control).

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("examplekeyvault"),
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("premium"),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewAccessPolicy(ctx, "example", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   pulumi.String(current.ObjectId),
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Get"),
			},
			SecretPermissions: pulumi.StringArray{
				pulumi.String("Get"),
			},
		})
		if err != nil {
			return err
		}
		example, err := azuread.LookupServicePrincipal(ctx, &azuread.LookupServicePrincipalArgs{
			DisplayName: pulumi.StringRef("example-app"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = keyvault.NewAccessPolicy(ctx, "example-principal", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   pulumi.String(example.ObjectId),
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Get"),
				pulumi.String("List"),
				pulumi.String("Encrypt"),
				pulumi.String("Decrypt"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Access Policies can be imported using the Resource ID of the Key Vault, plus some additional metadata.

If both an `object_id` and `application_id` are specified, then the Access Policy can be imported using the following code:

```sh $ pulumi import azure:keyvault/accessPolicy:AccessPolicy example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.KeyVault/vaults/test-vault/objectId/11111111-1111-1111-1111-111111111111/applicationId/22222222-2222-2222-2222-222222222222 ```

where `11111111-1111-1111-1111-111111111111` is the `object_id` and `22222222-2222-2222-2222-222222222222` is the `application_id`.

***

Access Policies with an `object_id` but no `application_id` can be imported using the following command:

```sh $ pulumi import azure:keyvault/accessPolicy:AccessPolicy example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.KeyVault/vaults/test-vault/objectId/11111111-1111-1111-1111-111111111111 ```

where `11111111-1111-1111-1111-111111111111` is the `object_id`.

func GetAccessPolicy

func GetAccessPolicy(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AccessPolicyState, opts ...pulumi.ResourceOption) (*AccessPolicy, error)

GetAccessPolicy gets an existing AccessPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAccessPolicy

func NewAccessPolicy(ctx *pulumi.Context,
	name string, args *AccessPolicyArgs, opts ...pulumi.ResourceOption) (*AccessPolicy, error)

NewAccessPolicy registers a new resource with the given unique name, arguments, and options.

func (*AccessPolicy) ElementType

func (*AccessPolicy) ElementType() reflect.Type

func (*AccessPolicy) ToAccessPolicyOutput

func (i *AccessPolicy) ToAccessPolicyOutput() AccessPolicyOutput

func (*AccessPolicy) ToAccessPolicyOutputWithContext

func (i *AccessPolicy) ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput

type AccessPolicyArgs

type AccessPolicyArgs struct {
	// The object ID of an Application in Azure Active Directory. Changing this forces a new resource to be created.
	ApplicationId pulumi.StringPtrInput
	// List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
	CertificatePermissions pulumi.StringArrayInput
	// List of key permissions, must be one or more from the following: `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
	KeyPermissions pulumi.StringArrayInput
	// Specifies the id of the Key Vault resource. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID of a service principal can be fetched from `azuread_service_principal.object_id`. The object ID must be unique for the list of access policies. Changing this forces a new resource to be created.
	ObjectId pulumi.StringInput
	// List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
	SecretPermissions pulumi.StringArrayInput
	// List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
	StoragePermissions pulumi.StringArrayInput
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Changing this forces a new resource to be created.
	TenantId pulumi.StringInput
}

The set of arguments for constructing a AccessPolicy resource.

func (AccessPolicyArgs) ElementType

func (AccessPolicyArgs) ElementType() reflect.Type

type AccessPolicyArray

type AccessPolicyArray []AccessPolicyInput

func (AccessPolicyArray) ElementType

func (AccessPolicyArray) ElementType() reflect.Type

func (AccessPolicyArray) ToAccessPolicyArrayOutput

func (i AccessPolicyArray) ToAccessPolicyArrayOutput() AccessPolicyArrayOutput

func (AccessPolicyArray) ToAccessPolicyArrayOutputWithContext

func (i AccessPolicyArray) ToAccessPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyArrayOutput

type AccessPolicyArrayInput

type AccessPolicyArrayInput interface {
	pulumi.Input

	ToAccessPolicyArrayOutput() AccessPolicyArrayOutput
	ToAccessPolicyArrayOutputWithContext(context.Context) AccessPolicyArrayOutput
}

AccessPolicyArrayInput is an input type that accepts AccessPolicyArray and AccessPolicyArrayOutput values. You can construct a concrete instance of `AccessPolicyArrayInput` via:

AccessPolicyArray{ AccessPolicyArgs{...} }

type AccessPolicyArrayOutput

type AccessPolicyArrayOutput struct{ *pulumi.OutputState }

func (AccessPolicyArrayOutput) ElementType

func (AccessPolicyArrayOutput) ElementType() reflect.Type

func (AccessPolicyArrayOutput) Index

func (AccessPolicyArrayOutput) ToAccessPolicyArrayOutput

func (o AccessPolicyArrayOutput) ToAccessPolicyArrayOutput() AccessPolicyArrayOutput

func (AccessPolicyArrayOutput) ToAccessPolicyArrayOutputWithContext

func (o AccessPolicyArrayOutput) ToAccessPolicyArrayOutputWithContext(ctx context.Context) AccessPolicyArrayOutput

type AccessPolicyInput

type AccessPolicyInput interface {
	pulumi.Input

	ToAccessPolicyOutput() AccessPolicyOutput
	ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput
}

type AccessPolicyMap

type AccessPolicyMap map[string]AccessPolicyInput

func (AccessPolicyMap) ElementType

func (AccessPolicyMap) ElementType() reflect.Type

func (AccessPolicyMap) ToAccessPolicyMapOutput

func (i AccessPolicyMap) ToAccessPolicyMapOutput() AccessPolicyMapOutput

func (AccessPolicyMap) ToAccessPolicyMapOutputWithContext

func (i AccessPolicyMap) ToAccessPolicyMapOutputWithContext(ctx context.Context) AccessPolicyMapOutput

type AccessPolicyMapInput

type AccessPolicyMapInput interface {
	pulumi.Input

	ToAccessPolicyMapOutput() AccessPolicyMapOutput
	ToAccessPolicyMapOutputWithContext(context.Context) AccessPolicyMapOutput
}

AccessPolicyMapInput is an input type that accepts AccessPolicyMap and AccessPolicyMapOutput values. You can construct a concrete instance of `AccessPolicyMapInput` via:

AccessPolicyMap{ "key": AccessPolicyArgs{...} }

type AccessPolicyMapOutput

type AccessPolicyMapOutput struct{ *pulumi.OutputState }

func (AccessPolicyMapOutput) ElementType

func (AccessPolicyMapOutput) ElementType() reflect.Type

func (AccessPolicyMapOutput) MapIndex

func (AccessPolicyMapOutput) ToAccessPolicyMapOutput

func (o AccessPolicyMapOutput) ToAccessPolicyMapOutput() AccessPolicyMapOutput

func (AccessPolicyMapOutput) ToAccessPolicyMapOutputWithContext

func (o AccessPolicyMapOutput) ToAccessPolicyMapOutputWithContext(ctx context.Context) AccessPolicyMapOutput

type AccessPolicyOutput

type AccessPolicyOutput struct{ *pulumi.OutputState }

func (AccessPolicyOutput) ApplicationId added in v5.5.0

func (o AccessPolicyOutput) ApplicationId() pulumi.StringPtrOutput

The object ID of an Application in Azure Active Directory. Changing this forces a new resource to be created.

func (AccessPolicyOutput) CertificatePermissions added in v5.5.0

func (o AccessPolicyOutput) CertificatePermissions() pulumi.StringArrayOutput

List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.

func (AccessPolicyOutput) ElementType

func (AccessPolicyOutput) ElementType() reflect.Type

func (AccessPolicyOutput) KeyPermissions added in v5.5.0

func (o AccessPolicyOutput) KeyPermissions() pulumi.StringArrayOutput

List of key permissions, must be one or more from the following: `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.

func (AccessPolicyOutput) KeyVaultId added in v5.5.0

func (o AccessPolicyOutput) KeyVaultId() pulumi.StringOutput

Specifies the id of the Key Vault resource. Changing this forces a new resource to be created.

func (AccessPolicyOutput) ObjectId added in v5.5.0

func (o AccessPolicyOutput) ObjectId() pulumi.StringOutput

The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID of a service principal can be fetched from `azuread_service_principal.object_id`. The object ID must be unique for the list of access policies. Changing this forces a new resource to be created.

func (AccessPolicyOutput) SecretPermissions added in v5.5.0

func (o AccessPolicyOutput) SecretPermissions() pulumi.StringArrayOutput

List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.

func (AccessPolicyOutput) StoragePermissions added in v5.5.0

func (o AccessPolicyOutput) StoragePermissions() pulumi.StringArrayOutput

List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.

func (AccessPolicyOutput) TenantId added in v5.5.0

func (o AccessPolicyOutput) TenantId() pulumi.StringOutput

The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Changing this forces a new resource to be created.

func (AccessPolicyOutput) ToAccessPolicyOutput

func (o AccessPolicyOutput) ToAccessPolicyOutput() AccessPolicyOutput

func (AccessPolicyOutput) ToAccessPolicyOutputWithContext

func (o AccessPolicyOutput) ToAccessPolicyOutputWithContext(ctx context.Context) AccessPolicyOutput

type AccessPolicyState

type AccessPolicyState struct {
	// The object ID of an Application in Azure Active Directory. Changing this forces a new resource to be created.
	ApplicationId pulumi.StringPtrInput
	// List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
	CertificatePermissions pulumi.StringArrayInput
	// List of key permissions, must be one or more from the following: `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
	KeyPermissions pulumi.StringArrayInput
	// Specifies the id of the Key Vault resource. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID of a service principal can be fetched from `azuread_service_principal.object_id`. The object ID must be unique for the list of access policies. Changing this forces a new resource to be created.
	ObjectId pulumi.StringPtrInput
	// List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
	SecretPermissions pulumi.StringArrayInput
	// List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
	StoragePermissions pulumi.StringArrayInput
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Changing this forces a new resource to be created.
	TenantId pulumi.StringPtrInput
}

func (AccessPolicyState) ElementType

func (AccessPolicyState) ElementType() reflect.Type

type Certifiate deprecated

type Certifiate struct {
	pulumi.CustomResourceState

	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertifiateCertificatePtrOutput `pulumi:"certificate"`
	// A `certificateAttribute` block as defined below.
	CertificateAttributes CertifiateCertificateAttributeArrayOutput `pulumi:"certificateAttributes"`
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringOutput `pulumi:"certificateData"`
	// The Base64 encoded Key Vault Certificate data.
	CertificateDataBase64 pulumi.StringOutput `pulumi:"certificateDataBase64"`
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertifiateCertificatePolicyOutput `pulumi:"certificatePolicy"`
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceManagerId pulumi.StringOutput `pulumi:"resourceManagerId"`
	// The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
	ResourceManagerVersionlessId pulumi.StringOutput `pulumi:"resourceManagerVersionlessId"`
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringOutput `pulumi:"secretId"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringOutput `pulumi:"thumbprint"`
	// The current version of the Key Vault Certificate.
	Version pulumi.StringOutput `pulumi:"version"`
	// The Base ID of the Key Vault Certificate.
	VersionlessId pulumi.StringOutput `pulumi:"versionlessId"`
	// The Base ID of the Key Vault Secret.
	VersionlessSecretId pulumi.StringOutput `pulumi:"versionlessSecretId"`
}

Manages a Key Vault Certificate.

## Example Usage

### Importing A PFX)

> **Note:** this example assumed the PFX file is located in the same directory at `certificate-to-import.pfx`.

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("examplekeyvault"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("premium"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					CertificatePermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Delete"),
						pulumi.String("DeleteIssuers"),
						pulumi.String("Get"),
						pulumi.String("GetIssuers"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("ListIssuers"),
						pulumi.String("ManageContacts"),
						pulumi.String("ManageIssuers"),
						pulumi.String("SetIssuers"),
						pulumi.String("Update"),
					},
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Create"),
						pulumi.String("Decrypt"),
						pulumi.String("Delete"),
						pulumi.String("Encrypt"),
						pulumi.String("Get"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Sign"),
						pulumi.String("UnwrapKey"),
						pulumi.String("Update"),
						pulumi.String("Verify"),
						pulumi.String("WrapKey"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Delete"),
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Set"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		invokeFilebase64, err := std.Filebase64(ctx, &std.Filebase64Args{
			Input: "certificate-to-import.pfx",
		}, nil)
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificate(ctx, "example", &keyvault.CertificateArgs{
			Name:       pulumi.String("imported-cert"),
			KeyVaultId: exampleKeyVault.ID(),
			Certificate: &keyvault.CertificateCertificateArgs{
				Contents: invokeFilebase64.Result,
				Password: pulumi.String(""),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Generating a new certificate

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                    pulumi.String("examplekeyvault"),
			Location:                example.Location,
			ResourceGroupName:       example.Name,
			TenantId:                pulumi.String(current.TenantId),
			SkuName:                 pulumi.String("standard"),
			SoftDeleteRetentionDays: pulumi.Int(7),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					CertificatePermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Delete"),
						pulumi.String("DeleteIssuers"),
						pulumi.String("Get"),
						pulumi.String("GetIssuers"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("ListIssuers"),
						pulumi.String("ManageContacts"),
						pulumi.String("ManageIssuers"),
						pulumi.String("Purge"),
						pulumi.String("SetIssuers"),
						pulumi.String("Update"),
					},
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Create"),
						pulumi.String("Decrypt"),
						pulumi.String("Delete"),
						pulumi.String("Encrypt"),
						pulumi.String("Get"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Sign"),
						pulumi.String("UnwrapKey"),
						pulumi.String("Update"),
						pulumi.String("Verify"),
						pulumi.String("WrapKey"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Delete"),
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Set"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificate(ctx, "example", &keyvault.CertificateArgs{
			Name:       pulumi.String("generated-cert"),
			KeyVaultId: exampleKeyVault.ID(),
			CertificatePolicy: &keyvault.CertificateCertificatePolicyArgs{
				IssuerParameters: &keyvault.CertificateCertificatePolicyIssuerParametersArgs{
					Name: pulumi.String("Self"),
				},
				KeyProperties: &keyvault.CertificateCertificatePolicyKeyPropertiesArgs{
					Exportable: pulumi.Bool(true),
					KeySize:    pulumi.Int(2048),
					KeyType:    pulumi.String("RSA"),
					ReuseKey:   pulumi.Bool(true),
				},
				LifetimeActions: keyvault.CertificateCertificatePolicyLifetimeActionArray{
					&keyvault.CertificateCertificatePolicyLifetimeActionArgs{
						Action: &keyvault.CertificateCertificatePolicyLifetimeActionActionArgs{
							ActionType: pulumi.String("AutoRenew"),
						},
						Trigger: &keyvault.CertificateCertificatePolicyLifetimeActionTriggerArgs{
							DaysBeforeExpiry: pulumi.Int(30),
						},
					},
				},
				SecretProperties: &keyvault.CertificateCertificatePolicySecretPropertiesArgs{
					ContentType: pulumi.String("application/x-pkcs12"),
				},
				X509CertificateProperties: &keyvault.CertificateCertificatePolicyX509CertificatePropertiesArgs{
					ExtendedKeyUsages: pulumi.StringArray{
						pulumi.String("1.3.6.1.5.5.7.3.1"),
					},
					KeyUsages: pulumi.StringArray{
						pulumi.String("cRLSign"),
						pulumi.String("dataEncipherment"),
						pulumi.String("digitalSignature"),
						pulumi.String("keyAgreement"),
						pulumi.String("keyCertSign"),
						pulumi.String("keyEncipherment"),
					},
					SubjectAlternativeNames: &keyvault.CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("internal.contoso.com"),
							pulumi.String("domain.hello.world"),
						},
					},
					Subject:          pulumi.String("CN=hello-world"),
					ValidityInMonths: pulumi.Int(12),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Certificates can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/certifiate:Certifiate example "https://example-keyvault.vault.azure.net/certificates/example/fdf067c93bbb4b22bff4d8b7a9a56217" ```

Deprecated: azure.keyvault.Certifiate has been deprecated in favor of azure.keyvault.Certificate

func GetCertifiate

func GetCertifiate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertifiateState, opts ...pulumi.ResourceOption) (*Certifiate, error)

GetCertifiate gets an existing Certifiate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertifiate

func NewCertifiate(ctx *pulumi.Context,
	name string, args *CertifiateArgs, opts ...pulumi.ResourceOption) (*Certifiate, error)

NewCertifiate registers a new resource with the given unique name, arguments, and options.

func (*Certifiate) ElementType

func (*Certifiate) ElementType() reflect.Type

func (*Certifiate) ToCertifiateOutput

func (i *Certifiate) ToCertifiateOutput() CertifiateOutput

func (*Certifiate) ToCertifiateOutputWithContext

func (i *Certifiate) ToCertifiateOutputWithContext(ctx context.Context) CertifiateOutput

type CertifiateArgs

type CertifiateArgs struct {
	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertifiateCertificatePtrInput
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertifiateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Certifiate resource.

func (CertifiateArgs) ElementType

func (CertifiateArgs) ElementType() reflect.Type

type CertifiateArray

type CertifiateArray []CertifiateInput

func (CertifiateArray) ElementType

func (CertifiateArray) ElementType() reflect.Type

func (CertifiateArray) ToCertifiateArrayOutput

func (i CertifiateArray) ToCertifiateArrayOutput() CertifiateArrayOutput

func (CertifiateArray) ToCertifiateArrayOutputWithContext

func (i CertifiateArray) ToCertifiateArrayOutputWithContext(ctx context.Context) CertifiateArrayOutput

type CertifiateArrayInput

type CertifiateArrayInput interface {
	pulumi.Input

	ToCertifiateArrayOutput() CertifiateArrayOutput
	ToCertifiateArrayOutputWithContext(context.Context) CertifiateArrayOutput
}

CertifiateArrayInput is an input type that accepts CertifiateArray and CertifiateArrayOutput values. You can construct a concrete instance of `CertifiateArrayInput` via:

CertifiateArray{ CertifiateArgs{...} }

type CertifiateArrayOutput

type CertifiateArrayOutput struct{ *pulumi.OutputState }

func (CertifiateArrayOutput) ElementType

func (CertifiateArrayOutput) ElementType() reflect.Type

func (CertifiateArrayOutput) Index

func (CertifiateArrayOutput) ToCertifiateArrayOutput

func (o CertifiateArrayOutput) ToCertifiateArrayOutput() CertifiateArrayOutput

func (CertifiateArrayOutput) ToCertifiateArrayOutputWithContext

func (o CertifiateArrayOutput) ToCertifiateArrayOutputWithContext(ctx context.Context) CertifiateArrayOutput

type CertifiateCertificate

type CertifiateCertificate struct {
	// The base64-encoded certificate contents.
	Contents string `pulumi:"contents"`
	// The password associated with the certificate.
	//
	// > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
	//
	// To convert a private key to pkcs8 format with openssl use:
	//
	// The PEM content should look something like:
	Password *string `pulumi:"password"`
}

type CertifiateCertificateArgs

type CertifiateCertificateArgs struct {
	// The base64-encoded certificate contents.
	Contents pulumi.StringInput `pulumi:"contents"`
	// The password associated with the certificate.
	//
	// > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
	//
	// To convert a private key to pkcs8 format with openssl use:
	//
	// The PEM content should look something like:
	Password pulumi.StringPtrInput `pulumi:"password"`
}

func (CertifiateCertificateArgs) ElementType

func (CertifiateCertificateArgs) ElementType() reflect.Type

func (CertifiateCertificateArgs) ToCertifiateCertificateOutput

func (i CertifiateCertificateArgs) ToCertifiateCertificateOutput() CertifiateCertificateOutput

func (CertifiateCertificateArgs) ToCertifiateCertificateOutputWithContext

func (i CertifiateCertificateArgs) ToCertifiateCertificateOutputWithContext(ctx context.Context) CertifiateCertificateOutput

func (CertifiateCertificateArgs) ToCertifiateCertificatePtrOutput

func (i CertifiateCertificateArgs) ToCertifiateCertificatePtrOutput() CertifiateCertificatePtrOutput

func (CertifiateCertificateArgs) ToCertifiateCertificatePtrOutputWithContext

func (i CertifiateCertificateArgs) ToCertifiateCertificatePtrOutputWithContext(ctx context.Context) CertifiateCertificatePtrOutput

type CertifiateCertificateAttribute

type CertifiateCertificateAttribute struct {
	// The create time of the Key Vault Certificate.
	Created *string `pulumi:"created"`
	// whether the Key Vault Certificate is enabled.
	Enabled *bool `pulumi:"enabled"`
	// The expires time of the Key Vault Certificate.
	Expires *string `pulumi:"expires"`
	// The not before valid time of the Key Vault Certificate.
	NotBefore *string `pulumi:"notBefore"`
	// The deletion recovery level of the Key Vault Certificate.
	RecoveryLevel *string `pulumi:"recoveryLevel"`
	// The recent update time of the Key Vault Certificate.
	Updated *string `pulumi:"updated"`
}

type CertifiateCertificateAttributeArgs

type CertifiateCertificateAttributeArgs struct {
	// The create time of the Key Vault Certificate.
	Created pulumi.StringPtrInput `pulumi:"created"`
	// whether the Key Vault Certificate is enabled.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The expires time of the Key Vault Certificate.
	Expires pulumi.StringPtrInput `pulumi:"expires"`
	// The not before valid time of the Key Vault Certificate.
	NotBefore pulumi.StringPtrInput `pulumi:"notBefore"`
	// The deletion recovery level of the Key Vault Certificate.
	RecoveryLevel pulumi.StringPtrInput `pulumi:"recoveryLevel"`
	// The recent update time of the Key Vault Certificate.
	Updated pulumi.StringPtrInput `pulumi:"updated"`
}

func (CertifiateCertificateAttributeArgs) ElementType

func (CertifiateCertificateAttributeArgs) ToCertifiateCertificateAttributeOutput

func (i CertifiateCertificateAttributeArgs) ToCertifiateCertificateAttributeOutput() CertifiateCertificateAttributeOutput

func (CertifiateCertificateAttributeArgs) ToCertifiateCertificateAttributeOutputWithContext

func (i CertifiateCertificateAttributeArgs) ToCertifiateCertificateAttributeOutputWithContext(ctx context.Context) CertifiateCertificateAttributeOutput

type CertifiateCertificateAttributeArray

type CertifiateCertificateAttributeArray []CertifiateCertificateAttributeInput

func (CertifiateCertificateAttributeArray) ElementType

func (CertifiateCertificateAttributeArray) ToCertifiateCertificateAttributeArrayOutput

func (i CertifiateCertificateAttributeArray) ToCertifiateCertificateAttributeArrayOutput() CertifiateCertificateAttributeArrayOutput

func (CertifiateCertificateAttributeArray) ToCertifiateCertificateAttributeArrayOutputWithContext

func (i CertifiateCertificateAttributeArray) ToCertifiateCertificateAttributeArrayOutputWithContext(ctx context.Context) CertifiateCertificateAttributeArrayOutput

type CertifiateCertificateAttributeArrayInput

type CertifiateCertificateAttributeArrayInput interface {
	pulumi.Input

	ToCertifiateCertificateAttributeArrayOutput() CertifiateCertificateAttributeArrayOutput
	ToCertifiateCertificateAttributeArrayOutputWithContext(context.Context) CertifiateCertificateAttributeArrayOutput
}

CertifiateCertificateAttributeArrayInput is an input type that accepts CertifiateCertificateAttributeArray and CertifiateCertificateAttributeArrayOutput values. You can construct a concrete instance of `CertifiateCertificateAttributeArrayInput` via:

CertifiateCertificateAttributeArray{ CertifiateCertificateAttributeArgs{...} }

type CertifiateCertificateAttributeArrayOutput

type CertifiateCertificateAttributeArrayOutput struct{ *pulumi.OutputState }

func (CertifiateCertificateAttributeArrayOutput) ElementType

func (CertifiateCertificateAttributeArrayOutput) Index

func (CertifiateCertificateAttributeArrayOutput) ToCertifiateCertificateAttributeArrayOutput

func (o CertifiateCertificateAttributeArrayOutput) ToCertifiateCertificateAttributeArrayOutput() CertifiateCertificateAttributeArrayOutput

func (CertifiateCertificateAttributeArrayOutput) ToCertifiateCertificateAttributeArrayOutputWithContext

func (o CertifiateCertificateAttributeArrayOutput) ToCertifiateCertificateAttributeArrayOutputWithContext(ctx context.Context) CertifiateCertificateAttributeArrayOutput

type CertifiateCertificateAttributeInput

type CertifiateCertificateAttributeInput interface {
	pulumi.Input

	ToCertifiateCertificateAttributeOutput() CertifiateCertificateAttributeOutput
	ToCertifiateCertificateAttributeOutputWithContext(context.Context) CertifiateCertificateAttributeOutput
}

CertifiateCertificateAttributeInput is an input type that accepts CertifiateCertificateAttributeArgs and CertifiateCertificateAttributeOutput values. You can construct a concrete instance of `CertifiateCertificateAttributeInput` via:

CertifiateCertificateAttributeArgs{...}

type CertifiateCertificateAttributeOutput

type CertifiateCertificateAttributeOutput struct{ *pulumi.OutputState }

func (CertifiateCertificateAttributeOutput) Created

The create time of the Key Vault Certificate.

func (CertifiateCertificateAttributeOutput) ElementType

func (CertifiateCertificateAttributeOutput) Enabled

whether the Key Vault Certificate is enabled.

func (CertifiateCertificateAttributeOutput) Expires

The expires time of the Key Vault Certificate.

func (CertifiateCertificateAttributeOutput) NotBefore

The not before valid time of the Key Vault Certificate.

func (CertifiateCertificateAttributeOutput) RecoveryLevel

The deletion recovery level of the Key Vault Certificate.

func (CertifiateCertificateAttributeOutput) ToCertifiateCertificateAttributeOutput

func (o CertifiateCertificateAttributeOutput) ToCertifiateCertificateAttributeOutput() CertifiateCertificateAttributeOutput

func (CertifiateCertificateAttributeOutput) ToCertifiateCertificateAttributeOutputWithContext

func (o CertifiateCertificateAttributeOutput) ToCertifiateCertificateAttributeOutputWithContext(ctx context.Context) CertifiateCertificateAttributeOutput

func (CertifiateCertificateAttributeOutput) Updated

The recent update time of the Key Vault Certificate.

type CertifiateCertificateInput

type CertifiateCertificateInput interface {
	pulumi.Input

	ToCertifiateCertificateOutput() CertifiateCertificateOutput
	ToCertifiateCertificateOutputWithContext(context.Context) CertifiateCertificateOutput
}

CertifiateCertificateInput is an input type that accepts CertifiateCertificateArgs and CertifiateCertificateOutput values. You can construct a concrete instance of `CertifiateCertificateInput` via:

CertifiateCertificateArgs{...}

type CertifiateCertificateOutput

type CertifiateCertificateOutput struct{ *pulumi.OutputState }

func (CertifiateCertificateOutput) Contents

The base64-encoded certificate contents.

func (CertifiateCertificateOutput) ElementType

func (CertifiateCertificateOutput) Password

The password associated with the certificate.

> **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.

To convert a private key to pkcs8 format with openssl use:

The PEM content should look something like:

func (CertifiateCertificateOutput) ToCertifiateCertificateOutput

func (o CertifiateCertificateOutput) ToCertifiateCertificateOutput() CertifiateCertificateOutput

func (CertifiateCertificateOutput) ToCertifiateCertificateOutputWithContext

func (o CertifiateCertificateOutput) ToCertifiateCertificateOutputWithContext(ctx context.Context) CertifiateCertificateOutput

func (CertifiateCertificateOutput) ToCertifiateCertificatePtrOutput

func (o CertifiateCertificateOutput) ToCertifiateCertificatePtrOutput() CertifiateCertificatePtrOutput

func (CertifiateCertificateOutput) ToCertifiateCertificatePtrOutputWithContext

func (o CertifiateCertificateOutput) ToCertifiateCertificatePtrOutputWithContext(ctx context.Context) CertifiateCertificatePtrOutput

type CertifiateCertificatePolicy

type CertifiateCertificatePolicy struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertifiateCertificatePolicyIssuerParameters `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertifiateCertificatePolicyKeyProperties `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions []CertifiateCertificatePolicyLifetimeAction `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertifiateCertificatePolicySecretProperties `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
	X509CertificateProperties *CertifiateCertificatePolicyX509CertificateProperties `pulumi:"x509CertificateProperties"`
}

type CertifiateCertificatePolicyArgs

type CertifiateCertificatePolicyArgs struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertifiateCertificatePolicyIssuerParametersInput `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertifiateCertificatePolicyKeyPropertiesInput `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions CertifiateCertificatePolicyLifetimeActionArrayInput `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertifiateCertificatePolicySecretPropertiesInput `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
	X509CertificateProperties CertifiateCertificatePolicyX509CertificatePropertiesPtrInput `pulumi:"x509CertificateProperties"`
}

func (CertifiateCertificatePolicyArgs) ElementType

func (CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyOutput

func (i CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyOutput() CertifiateCertificatePolicyOutput

func (CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyOutputWithContext

func (i CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyOutputWithContext(ctx context.Context) CertifiateCertificatePolicyOutput

func (CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyPtrOutput

func (i CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyPtrOutput() CertifiateCertificatePolicyPtrOutput

func (CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyPtrOutputWithContext

func (i CertifiateCertificatePolicyArgs) ToCertifiateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyPtrOutput

type CertifiateCertificatePolicyInput

type CertifiateCertificatePolicyInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyOutput() CertifiateCertificatePolicyOutput
	ToCertifiateCertificatePolicyOutputWithContext(context.Context) CertifiateCertificatePolicyOutput
}

CertifiateCertificatePolicyInput is an input type that accepts CertifiateCertificatePolicyArgs and CertifiateCertificatePolicyOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyInput` via:

CertifiateCertificatePolicyArgs{...}

type CertifiateCertificatePolicyIssuerParameters

type CertifiateCertificatePolicyIssuerParameters struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
	Name string `pulumi:"name"`
}

type CertifiateCertificatePolicyIssuerParametersArgs

type CertifiateCertificatePolicyIssuerParametersArgs struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
	Name pulumi.StringInput `pulumi:"name"`
}

func (CertifiateCertificatePolicyIssuerParametersArgs) ElementType

func (CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersOutput

func (i CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersOutput() CertifiateCertificatePolicyIssuerParametersOutput

func (CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersOutputWithContext

func (i CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersOutputWithContext(ctx context.Context) CertifiateCertificatePolicyIssuerParametersOutput

func (CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersPtrOutput

func (i CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersPtrOutput() CertifiateCertificatePolicyIssuerParametersPtrOutput

func (CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext

func (i CertifiateCertificatePolicyIssuerParametersArgs) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyIssuerParametersPtrOutput

type CertifiateCertificatePolicyIssuerParametersInput

type CertifiateCertificatePolicyIssuerParametersInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyIssuerParametersOutput() CertifiateCertificatePolicyIssuerParametersOutput
	ToCertifiateCertificatePolicyIssuerParametersOutputWithContext(context.Context) CertifiateCertificatePolicyIssuerParametersOutput
}

CertifiateCertificatePolicyIssuerParametersInput is an input type that accepts CertifiateCertificatePolicyIssuerParametersArgs and CertifiateCertificatePolicyIssuerParametersOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyIssuerParametersInput` via:

CertifiateCertificatePolicyIssuerParametersArgs{...}

type CertifiateCertificatePolicyIssuerParametersOutput

type CertifiateCertificatePolicyIssuerParametersOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyIssuerParametersOutput) ElementType

func (CertifiateCertificatePolicyIssuerParametersOutput) Name

The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).

func (CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersOutput

func (o CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersOutput() CertifiateCertificatePolicyIssuerParametersOutput

func (CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersOutputWithContext

func (o CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersOutputWithContext(ctx context.Context) CertifiateCertificatePolicyIssuerParametersOutput

func (CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutput

func (o CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutput() CertifiateCertificatePolicyIssuerParametersPtrOutput

func (CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext

func (o CertifiateCertificatePolicyIssuerParametersOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyIssuerParametersPtrOutput

type CertifiateCertificatePolicyIssuerParametersPtrInput

type CertifiateCertificatePolicyIssuerParametersPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyIssuerParametersPtrOutput() CertifiateCertificatePolicyIssuerParametersPtrOutput
	ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext(context.Context) CertifiateCertificatePolicyIssuerParametersPtrOutput
}

CertifiateCertificatePolicyIssuerParametersPtrInput is an input type that accepts CertifiateCertificatePolicyIssuerParametersArgs, CertifiateCertificatePolicyIssuerParametersPtr and CertifiateCertificatePolicyIssuerParametersPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyIssuerParametersPtrInput` via:

        CertifiateCertificatePolicyIssuerParametersArgs{...}

or:

        nil

type CertifiateCertificatePolicyIssuerParametersPtrOutput

type CertifiateCertificatePolicyIssuerParametersPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyIssuerParametersPtrOutput) Elem

func (CertifiateCertificatePolicyIssuerParametersPtrOutput) ElementType

func (CertifiateCertificatePolicyIssuerParametersPtrOutput) Name

The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).

func (CertifiateCertificatePolicyIssuerParametersPtrOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutput

func (CertifiateCertificatePolicyIssuerParametersPtrOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext

func (o CertifiateCertificatePolicyIssuerParametersPtrOutput) ToCertifiateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyIssuerParametersPtrOutput

type CertifiateCertificatePolicyKeyProperties

type CertifiateCertificatePolicyKeyProperties struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
	Curve *string `pulumi:"curve"`
	// Is this certificate exportable?
	Exportable bool `pulumi:"exportable"`
	// The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
	KeySize *int `pulumi:"keySize"`
	// Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
	KeyType string `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey bool `pulumi:"reuseKey"`
}

type CertifiateCertificatePolicyKeyPropertiesArgs

type CertifiateCertificatePolicyKeyPropertiesArgs struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
	Curve pulumi.StringPtrInput `pulumi:"curve"`
	// Is this certificate exportable?
	Exportable pulumi.BoolInput `pulumi:"exportable"`
	// The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
	KeySize pulumi.IntPtrInput `pulumi:"keySize"`
	// Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
	KeyType pulumi.StringInput `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey pulumi.BoolInput `pulumi:"reuseKey"`
}

func (CertifiateCertificatePolicyKeyPropertiesArgs) ElementType

func (CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesOutput

func (i CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesOutput() CertifiateCertificatePolicyKeyPropertiesOutput

func (CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext

func (i CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicyKeyPropertiesOutput

func (CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput

func (i CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput() CertifiateCertificatePolicyKeyPropertiesPtrOutput

func (CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (i CertifiateCertificatePolicyKeyPropertiesArgs) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyKeyPropertiesPtrOutput

type CertifiateCertificatePolicyKeyPropertiesInput

type CertifiateCertificatePolicyKeyPropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyKeyPropertiesOutput() CertifiateCertificatePolicyKeyPropertiesOutput
	ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext(context.Context) CertifiateCertificatePolicyKeyPropertiesOutput
}

CertifiateCertificatePolicyKeyPropertiesInput is an input type that accepts CertifiateCertificatePolicyKeyPropertiesArgs and CertifiateCertificatePolicyKeyPropertiesOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyKeyPropertiesInput` via:

CertifiateCertificatePolicyKeyPropertiesArgs{...}

type CertifiateCertificatePolicyKeyPropertiesOutput

type CertifiateCertificatePolicyKeyPropertiesOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyKeyPropertiesOutput) Curve

Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.

func (CertifiateCertificatePolicyKeyPropertiesOutput) ElementType

func (CertifiateCertificatePolicyKeyPropertiesOutput) Exportable

Is this certificate exportable?

func (CertifiateCertificatePolicyKeyPropertiesOutput) KeySize

The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.

func (CertifiateCertificatePolicyKeyPropertiesOutput) KeyType

Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.

func (CertifiateCertificatePolicyKeyPropertiesOutput) ReuseKey

Is the key reusable?

func (CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesOutput

func (o CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesOutput() CertifiateCertificatePolicyKeyPropertiesOutput

func (CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext

func (o CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicyKeyPropertiesOutput

func (CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput

func (o CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput() CertifiateCertificatePolicyKeyPropertiesPtrOutput

func (CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicyKeyPropertiesOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyKeyPropertiesPtrOutput

type CertifiateCertificatePolicyKeyPropertiesPtrInput

type CertifiateCertificatePolicyKeyPropertiesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyKeyPropertiesPtrOutput() CertifiateCertificatePolicyKeyPropertiesPtrOutput
	ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext(context.Context) CertifiateCertificatePolicyKeyPropertiesPtrOutput
}

CertifiateCertificatePolicyKeyPropertiesPtrInput is an input type that accepts CertifiateCertificatePolicyKeyPropertiesArgs, CertifiateCertificatePolicyKeyPropertiesPtr and CertifiateCertificatePolicyKeyPropertiesPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyKeyPropertiesPtrInput` via:

        CertifiateCertificatePolicyKeyPropertiesArgs{...}

or:

        nil

type CertifiateCertificatePolicyKeyPropertiesPtrOutput

type CertifiateCertificatePolicyKeyPropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) Curve

Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) Elem

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) ElementType

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) Exportable

Is this certificate exportable?

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) KeySize

The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) KeyType

Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) ReuseKey

Is the key reusable?

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput

func (o CertifiateCertificatePolicyKeyPropertiesPtrOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutput() CertifiateCertificatePolicyKeyPropertiesPtrOutput

func (CertifiateCertificatePolicyKeyPropertiesPtrOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicyKeyPropertiesPtrOutput) ToCertifiateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyKeyPropertiesPtrOutput

type CertifiateCertificatePolicyLifetimeAction

type CertifiateCertificatePolicyLifetimeAction struct {
	// A `action` block as defined below.
	Action CertifiateCertificatePolicyLifetimeActionAction `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertifiateCertificatePolicyLifetimeActionTrigger `pulumi:"trigger"`
}

type CertifiateCertificatePolicyLifetimeActionAction

type CertifiateCertificatePolicyLifetimeActionAction struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
	ActionType string `pulumi:"actionType"`
}

type CertifiateCertificatePolicyLifetimeActionActionArgs

type CertifiateCertificatePolicyLifetimeActionActionArgs struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
	ActionType pulumi.StringInput `pulumi:"actionType"`
}

func (CertifiateCertificatePolicyLifetimeActionActionArgs) ElementType

func (CertifiateCertificatePolicyLifetimeActionActionArgs) ToCertifiateCertificatePolicyLifetimeActionActionOutput

func (i CertifiateCertificatePolicyLifetimeActionActionArgs) ToCertifiateCertificatePolicyLifetimeActionActionOutput() CertifiateCertificatePolicyLifetimeActionActionOutput

func (CertifiateCertificatePolicyLifetimeActionActionArgs) ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext

func (i CertifiateCertificatePolicyLifetimeActionActionArgs) ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionActionOutput

type CertifiateCertificatePolicyLifetimeActionActionInput

type CertifiateCertificatePolicyLifetimeActionActionInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionActionOutput() CertifiateCertificatePolicyLifetimeActionActionOutput
	ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionActionOutput
}

CertifiateCertificatePolicyLifetimeActionActionInput is an input type that accepts CertifiateCertificatePolicyLifetimeActionActionArgs and CertifiateCertificatePolicyLifetimeActionActionOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyLifetimeActionActionInput` via:

CertifiateCertificatePolicyLifetimeActionActionArgs{...}

type CertifiateCertificatePolicyLifetimeActionActionOutput

type CertifiateCertificatePolicyLifetimeActionActionOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyLifetimeActionActionOutput) ActionType

The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.

func (CertifiateCertificatePolicyLifetimeActionActionOutput) ElementType

func (CertifiateCertificatePolicyLifetimeActionActionOutput) ToCertifiateCertificatePolicyLifetimeActionActionOutput

func (CertifiateCertificatePolicyLifetimeActionActionOutput) ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext

func (o CertifiateCertificatePolicyLifetimeActionActionOutput) ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionActionOutput

type CertifiateCertificatePolicyLifetimeActionArgs

type CertifiateCertificatePolicyLifetimeActionArgs struct {
	// A `action` block as defined below.
	Action CertifiateCertificatePolicyLifetimeActionActionInput `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertifiateCertificatePolicyLifetimeActionTriggerInput `pulumi:"trigger"`
}

func (CertifiateCertificatePolicyLifetimeActionArgs) ElementType

func (CertifiateCertificatePolicyLifetimeActionArgs) ToCertifiateCertificatePolicyLifetimeActionOutput

func (i CertifiateCertificatePolicyLifetimeActionArgs) ToCertifiateCertificatePolicyLifetimeActionOutput() CertifiateCertificatePolicyLifetimeActionOutput

func (CertifiateCertificatePolicyLifetimeActionArgs) ToCertifiateCertificatePolicyLifetimeActionOutputWithContext

func (i CertifiateCertificatePolicyLifetimeActionArgs) ToCertifiateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionOutput

type CertifiateCertificatePolicyLifetimeActionArray

type CertifiateCertificatePolicyLifetimeActionArray []CertifiateCertificatePolicyLifetimeActionInput

func (CertifiateCertificatePolicyLifetimeActionArray) ElementType

func (CertifiateCertificatePolicyLifetimeActionArray) ToCertifiateCertificatePolicyLifetimeActionArrayOutput

func (i CertifiateCertificatePolicyLifetimeActionArray) ToCertifiateCertificatePolicyLifetimeActionArrayOutput() CertifiateCertificatePolicyLifetimeActionArrayOutput

func (CertifiateCertificatePolicyLifetimeActionArray) ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext

func (i CertifiateCertificatePolicyLifetimeActionArray) ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionArrayOutput

type CertifiateCertificatePolicyLifetimeActionArrayInput

type CertifiateCertificatePolicyLifetimeActionArrayInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionArrayOutput() CertifiateCertificatePolicyLifetimeActionArrayOutput
	ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionArrayOutput
}

CertifiateCertificatePolicyLifetimeActionArrayInput is an input type that accepts CertifiateCertificatePolicyLifetimeActionArray and CertifiateCertificatePolicyLifetimeActionArrayOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyLifetimeActionArrayInput` via:

CertifiateCertificatePolicyLifetimeActionArray{ CertifiateCertificatePolicyLifetimeActionArgs{...} }

type CertifiateCertificatePolicyLifetimeActionArrayOutput

type CertifiateCertificatePolicyLifetimeActionArrayOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyLifetimeActionArrayOutput) ElementType

func (CertifiateCertificatePolicyLifetimeActionArrayOutput) Index

func (CertifiateCertificatePolicyLifetimeActionArrayOutput) ToCertifiateCertificatePolicyLifetimeActionArrayOutput

func (CertifiateCertificatePolicyLifetimeActionArrayOutput) ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext

func (o CertifiateCertificatePolicyLifetimeActionArrayOutput) ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionArrayOutput

type CertifiateCertificatePolicyLifetimeActionInput

type CertifiateCertificatePolicyLifetimeActionInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionOutput() CertifiateCertificatePolicyLifetimeActionOutput
	ToCertifiateCertificatePolicyLifetimeActionOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionOutput
}

CertifiateCertificatePolicyLifetimeActionInput is an input type that accepts CertifiateCertificatePolicyLifetimeActionArgs and CertifiateCertificatePolicyLifetimeActionOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyLifetimeActionInput` via:

CertifiateCertificatePolicyLifetimeActionArgs{...}

type CertifiateCertificatePolicyLifetimeActionOutput

type CertifiateCertificatePolicyLifetimeActionOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyLifetimeActionOutput) Action

A `action` block as defined below.

func (CertifiateCertificatePolicyLifetimeActionOutput) ElementType

func (CertifiateCertificatePolicyLifetimeActionOutput) ToCertifiateCertificatePolicyLifetimeActionOutput

func (o CertifiateCertificatePolicyLifetimeActionOutput) ToCertifiateCertificatePolicyLifetimeActionOutput() CertifiateCertificatePolicyLifetimeActionOutput

func (CertifiateCertificatePolicyLifetimeActionOutput) ToCertifiateCertificatePolicyLifetimeActionOutputWithContext

func (o CertifiateCertificatePolicyLifetimeActionOutput) ToCertifiateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionOutput

func (CertifiateCertificatePolicyLifetimeActionOutput) Trigger

A `trigger` block as defined below.

type CertifiateCertificatePolicyLifetimeActionTrigger

type CertifiateCertificatePolicyLifetimeActionTrigger struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry *int `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage *int `pulumi:"lifetimePercentage"`
}

type CertifiateCertificatePolicyLifetimeActionTriggerArgs

type CertifiateCertificatePolicyLifetimeActionTriggerArgs struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry pulumi.IntPtrInput `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage pulumi.IntPtrInput `pulumi:"lifetimePercentage"`
}

func (CertifiateCertificatePolicyLifetimeActionTriggerArgs) ElementType

func (CertifiateCertificatePolicyLifetimeActionTriggerArgs) ToCertifiateCertificatePolicyLifetimeActionTriggerOutput

func (i CertifiateCertificatePolicyLifetimeActionTriggerArgs) ToCertifiateCertificatePolicyLifetimeActionTriggerOutput() CertifiateCertificatePolicyLifetimeActionTriggerOutput

func (CertifiateCertificatePolicyLifetimeActionTriggerArgs) ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (i CertifiateCertificatePolicyLifetimeActionTriggerArgs) ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionTriggerOutput

type CertifiateCertificatePolicyLifetimeActionTriggerInput

type CertifiateCertificatePolicyLifetimeActionTriggerInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionTriggerOutput() CertifiateCertificatePolicyLifetimeActionTriggerOutput
	ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionTriggerOutput
}

CertifiateCertificatePolicyLifetimeActionTriggerInput is an input type that accepts CertifiateCertificatePolicyLifetimeActionTriggerArgs and CertifiateCertificatePolicyLifetimeActionTriggerOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyLifetimeActionTriggerInput` via:

CertifiateCertificatePolicyLifetimeActionTriggerArgs{...}

type CertifiateCertificatePolicyLifetimeActionTriggerOutput

type CertifiateCertificatePolicyLifetimeActionTriggerOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyLifetimeActionTriggerOutput) DaysBeforeExpiry

The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.

func (CertifiateCertificatePolicyLifetimeActionTriggerOutput) ElementType

func (CertifiateCertificatePolicyLifetimeActionTriggerOutput) LifetimePercentage

The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.

func (CertifiateCertificatePolicyLifetimeActionTriggerOutput) ToCertifiateCertificatePolicyLifetimeActionTriggerOutput

func (CertifiateCertificatePolicyLifetimeActionTriggerOutput) ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (o CertifiateCertificatePolicyLifetimeActionTriggerOutput) ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) CertifiateCertificatePolicyLifetimeActionTriggerOutput

type CertifiateCertificatePolicyOutput

type CertifiateCertificatePolicyOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyOutput) ElementType

func (CertifiateCertificatePolicyOutput) IssuerParameters

A `issuerParameters` block as defined below.

func (CertifiateCertificatePolicyOutput) KeyProperties

A `keyProperties` block as defined below.

func (CertifiateCertificatePolicyOutput) LifetimeActions

A `lifetimeAction` block as defined below.

func (CertifiateCertificatePolicyOutput) SecretProperties

A `secretProperties` block as defined below.

func (CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyOutput

func (o CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyOutput() CertifiateCertificatePolicyOutput

func (CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyOutputWithContext

func (o CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyOutputWithContext(ctx context.Context) CertifiateCertificatePolicyOutput

func (CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyPtrOutput

func (o CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyPtrOutput() CertifiateCertificatePolicyPtrOutput

func (CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyPtrOutputWithContext

func (o CertifiateCertificatePolicyOutput) ToCertifiateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyPtrOutput

func (CertifiateCertificatePolicyOutput) X509CertificateProperties

A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.

type CertifiateCertificatePolicyPtrInput

type CertifiateCertificatePolicyPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyPtrOutput() CertifiateCertificatePolicyPtrOutput
	ToCertifiateCertificatePolicyPtrOutputWithContext(context.Context) CertifiateCertificatePolicyPtrOutput
}

CertifiateCertificatePolicyPtrInput is an input type that accepts CertifiateCertificatePolicyArgs, CertifiateCertificatePolicyPtr and CertifiateCertificatePolicyPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyPtrInput` via:

        CertifiateCertificatePolicyArgs{...}

or:

        nil

type CertifiateCertificatePolicyPtrOutput

type CertifiateCertificatePolicyPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyPtrOutput) Elem

func (CertifiateCertificatePolicyPtrOutput) ElementType

func (CertifiateCertificatePolicyPtrOutput) IssuerParameters

A `issuerParameters` block as defined below.

func (CertifiateCertificatePolicyPtrOutput) KeyProperties

A `keyProperties` block as defined below.

func (CertifiateCertificatePolicyPtrOutput) LifetimeActions

A `lifetimeAction` block as defined below.

func (CertifiateCertificatePolicyPtrOutput) SecretProperties

A `secretProperties` block as defined below.

func (CertifiateCertificatePolicyPtrOutput) ToCertifiateCertificatePolicyPtrOutput

func (o CertifiateCertificatePolicyPtrOutput) ToCertifiateCertificatePolicyPtrOutput() CertifiateCertificatePolicyPtrOutput

func (CertifiateCertificatePolicyPtrOutput) ToCertifiateCertificatePolicyPtrOutputWithContext

func (o CertifiateCertificatePolicyPtrOutput) ToCertifiateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyPtrOutput

func (CertifiateCertificatePolicyPtrOutput) X509CertificateProperties

A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.

type CertifiateCertificatePolicySecretProperties

type CertifiateCertificatePolicySecretProperties struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType string `pulumi:"contentType"`
}

type CertifiateCertificatePolicySecretPropertiesArgs

type CertifiateCertificatePolicySecretPropertiesArgs struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType pulumi.StringInput `pulumi:"contentType"`
}

func (CertifiateCertificatePolicySecretPropertiesArgs) ElementType

func (CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesOutput

func (i CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesOutput() CertifiateCertificatePolicySecretPropertiesOutput

func (CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesOutputWithContext

func (i CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicySecretPropertiesOutput

func (CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesPtrOutput

func (i CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesPtrOutput() CertifiateCertificatePolicySecretPropertiesPtrOutput

func (CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext

func (i CertifiateCertificatePolicySecretPropertiesArgs) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicySecretPropertiesPtrOutput

type CertifiateCertificatePolicySecretPropertiesInput

type CertifiateCertificatePolicySecretPropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicySecretPropertiesOutput() CertifiateCertificatePolicySecretPropertiesOutput
	ToCertifiateCertificatePolicySecretPropertiesOutputWithContext(context.Context) CertifiateCertificatePolicySecretPropertiesOutput
}

CertifiateCertificatePolicySecretPropertiesInput is an input type that accepts CertifiateCertificatePolicySecretPropertiesArgs and CertifiateCertificatePolicySecretPropertiesOutput values. You can construct a concrete instance of `CertifiateCertificatePolicySecretPropertiesInput` via:

CertifiateCertificatePolicySecretPropertiesArgs{...}

type CertifiateCertificatePolicySecretPropertiesOutput

type CertifiateCertificatePolicySecretPropertiesOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicySecretPropertiesOutput) ContentType

The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.

func (CertifiateCertificatePolicySecretPropertiesOutput) ElementType

func (CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesOutput

func (o CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesOutput() CertifiateCertificatePolicySecretPropertiesOutput

func (CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesOutputWithContext

func (o CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicySecretPropertiesOutput

func (CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutput

func (o CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutput() CertifiateCertificatePolicySecretPropertiesPtrOutput

func (CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicySecretPropertiesOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicySecretPropertiesPtrOutput

type CertifiateCertificatePolicySecretPropertiesPtrInput

type CertifiateCertificatePolicySecretPropertiesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicySecretPropertiesPtrOutput() CertifiateCertificatePolicySecretPropertiesPtrOutput
	ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext(context.Context) CertifiateCertificatePolicySecretPropertiesPtrOutput
}

CertifiateCertificatePolicySecretPropertiesPtrInput is an input type that accepts CertifiateCertificatePolicySecretPropertiesArgs, CertifiateCertificatePolicySecretPropertiesPtr and CertifiateCertificatePolicySecretPropertiesPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicySecretPropertiesPtrInput` via:

        CertifiateCertificatePolicySecretPropertiesArgs{...}

or:

        nil

type CertifiateCertificatePolicySecretPropertiesPtrOutput

type CertifiateCertificatePolicySecretPropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicySecretPropertiesPtrOutput) ContentType

The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.

func (CertifiateCertificatePolicySecretPropertiesPtrOutput) Elem

func (CertifiateCertificatePolicySecretPropertiesPtrOutput) ElementType

func (CertifiateCertificatePolicySecretPropertiesPtrOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutput

func (CertifiateCertificatePolicySecretPropertiesPtrOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicySecretPropertiesPtrOutput) ToCertifiateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicySecretPropertiesPtrOutput

type CertifiateCertificatePolicyX509CertificateProperties

type CertifiateCertificatePolicyX509CertificateProperties struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages []string `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
	KeyUsages []string `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject string `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames *CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths int `pulumi:"validityInMonths"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesArgs

type CertifiateCertificatePolicyX509CertificatePropertiesArgs struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages pulumi.StringArrayInput `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
	KeyUsages pulumi.StringArrayInput `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject pulumi.StringInput `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths pulumi.IntInput `pulumi:"validityInMonths"`
}

func (CertifiateCertificatePolicyX509CertificatePropertiesArgs) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext

func (i CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicyX509CertificatePropertiesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (i CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput() CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (i CertifiateCertificatePolicyX509CertificatePropertiesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

type CertifiateCertificatePolicyX509CertificatePropertiesInput

type CertifiateCertificatePolicyX509CertificatePropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesOutput() CertifiateCertificatePolicyX509CertificatePropertiesOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesOutput
}

CertifiateCertificatePolicyX509CertificatePropertiesInput is an input type that accepts CertifiateCertificatePolicyX509CertificatePropertiesArgs and CertifiateCertificatePolicyX509CertificatePropertiesOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyX509CertificatePropertiesInput` via:

CertifiateCertificatePolicyX509CertificatePropertiesArgs{...}

type CertifiateCertificatePolicyX509CertificatePropertiesOutput

type CertifiateCertificatePolicyX509CertificatePropertiesOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ExtendedKeyUsages

A list of Extended/Enhanced Key Usages.

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) KeyUsages

A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) Subject

The Certificate's Subject.

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) SubjectAlternativeNames

A `subjectAlternativeNames` block as defined below.

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext

func (o CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext(ctx context.Context) CertifiateCertificatePolicyX509CertificatePropertiesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicyX509CertificatePropertiesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesOutput) ValidityInMonths

The Certificates Validity Period in Months.

type CertifiateCertificatePolicyX509CertificatePropertiesPtrInput

type CertifiateCertificatePolicyX509CertificatePropertiesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput() CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput
}

CertifiateCertificatePolicyX509CertificatePropertiesPtrInput is an input type that accepts CertifiateCertificatePolicyX509CertificatePropertiesArgs, CertifiateCertificatePolicyX509CertificatePropertiesPtr and CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyX509CertificatePropertiesPtrInput` via:

        CertifiateCertificatePolicyX509CertificatePropertiesArgs{...}

or:

        nil

type CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

type CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) Elem

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ExtendedKeyUsages

A list of Extended/Enhanced Key Usages.

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) KeyUsages

A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) Subject

The Certificate's Subject.

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) SubjectAlternativeNames

A `subjectAlternativeNames` block as defined below.

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (o CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput) ValidityInMonths

The Certificates Validity Period in Months.

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames []string `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails []string `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns []string `pulumi:"upns"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails pulumi.StringArrayInput `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns pulumi.StringArrayInput `pulumi:"upns"`
}

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput() CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
}

CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput is an input type that accepts CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs and CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput` via:

CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{...}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) DnsNames

A list of alternative DNS names (FQDNs) identified by the Certificate.

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) Emails

A list of email addresses identified by this Certificate.

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) Upns

A list of User Principal Names identified by the Certificate.

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput() CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
}

CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput is an input type that accepts CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs, CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtr and CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput values. You can construct a concrete instance of `CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput` via:

        CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{...}

or:

        nil

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) DnsNames

A list of alternative DNS names (FQDNs) identified by the Certificate.

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ElementType

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) Emails

A list of email addresses identified by this Certificate.

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

func (CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) Upns

A list of User Principal Names identified by the Certificate.

type CertifiateCertificatePtrInput

type CertifiateCertificatePtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePtrOutput() CertifiateCertificatePtrOutput
	ToCertifiateCertificatePtrOutputWithContext(context.Context) CertifiateCertificatePtrOutput
}

CertifiateCertificatePtrInput is an input type that accepts CertifiateCertificateArgs, CertifiateCertificatePtr and CertifiateCertificatePtrOutput values. You can construct a concrete instance of `CertifiateCertificatePtrInput` via:

        CertifiateCertificateArgs{...}

or:

        nil

type CertifiateCertificatePtrOutput

type CertifiateCertificatePtrOutput struct{ *pulumi.OutputState }

func (CertifiateCertificatePtrOutput) Contents

The base64-encoded certificate contents.

func (CertifiateCertificatePtrOutput) Elem

func (CertifiateCertificatePtrOutput) ElementType

func (CertifiateCertificatePtrOutput) Password

The password associated with the certificate.

> **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.

To convert a private key to pkcs8 format with openssl use:

The PEM content should look something like:

func (CertifiateCertificatePtrOutput) ToCertifiateCertificatePtrOutput

func (o CertifiateCertificatePtrOutput) ToCertifiateCertificatePtrOutput() CertifiateCertificatePtrOutput

func (CertifiateCertificatePtrOutput) ToCertifiateCertificatePtrOutputWithContext

func (o CertifiateCertificatePtrOutput) ToCertifiateCertificatePtrOutputWithContext(ctx context.Context) CertifiateCertificatePtrOutput

type CertifiateInput

type CertifiateInput interface {
	pulumi.Input

	ToCertifiateOutput() CertifiateOutput
	ToCertifiateOutputWithContext(ctx context.Context) CertifiateOutput
}

type CertifiateMap

type CertifiateMap map[string]CertifiateInput

func (CertifiateMap) ElementType

func (CertifiateMap) ElementType() reflect.Type

func (CertifiateMap) ToCertifiateMapOutput

func (i CertifiateMap) ToCertifiateMapOutput() CertifiateMapOutput

func (CertifiateMap) ToCertifiateMapOutputWithContext

func (i CertifiateMap) ToCertifiateMapOutputWithContext(ctx context.Context) CertifiateMapOutput

type CertifiateMapInput

type CertifiateMapInput interface {
	pulumi.Input

	ToCertifiateMapOutput() CertifiateMapOutput
	ToCertifiateMapOutputWithContext(context.Context) CertifiateMapOutput
}

CertifiateMapInput is an input type that accepts CertifiateMap and CertifiateMapOutput values. You can construct a concrete instance of `CertifiateMapInput` via:

CertifiateMap{ "key": CertifiateArgs{...} }

type CertifiateMapOutput

type CertifiateMapOutput struct{ *pulumi.OutputState }

func (CertifiateMapOutput) ElementType

func (CertifiateMapOutput) ElementType() reflect.Type

func (CertifiateMapOutput) MapIndex

func (CertifiateMapOutput) ToCertifiateMapOutput

func (o CertifiateMapOutput) ToCertifiateMapOutput() CertifiateMapOutput

func (CertifiateMapOutput) ToCertifiateMapOutputWithContext

func (o CertifiateMapOutput) ToCertifiateMapOutputWithContext(ctx context.Context) CertifiateMapOutput

type CertifiateOutput

type CertifiateOutput struct{ *pulumi.OutputState }

func (CertifiateOutput) Certificate added in v5.5.0

A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.

func (CertifiateOutput) CertificateAttributes added in v5.5.0

A `certificateAttribute` block as defined below.

func (CertifiateOutput) CertificateData added in v5.5.0

func (o CertifiateOutput) CertificateData() pulumi.StringOutput

The raw Key Vault Certificate data represented as a hexadecimal string.

func (CertifiateOutput) CertificateDataBase64 added in v5.5.0

func (o CertifiateOutput) CertificateDataBase64() pulumi.StringOutput

The Base64 encoded Key Vault Certificate data.

func (CertifiateOutput) CertificatePolicy added in v5.5.0

A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.

> **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.

func (CertifiateOutput) ElementType

func (CertifiateOutput) ElementType() reflect.Type

func (CertifiateOutput) KeyVaultId added in v5.5.0

func (o CertifiateOutput) KeyVaultId() pulumi.StringOutput

The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.

func (CertifiateOutput) Name added in v5.5.0

Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.

func (CertifiateOutput) ResourceManagerId added in v5.41.0

func (o CertifiateOutput) ResourceManagerId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.

func (CertifiateOutput) ResourceManagerVersionlessId added in v5.41.0

func (o CertifiateOutput) ResourceManagerVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.

func (CertifiateOutput) SecretId added in v5.5.0

func (o CertifiateOutput) SecretId() pulumi.StringOutput

The ID of the associated Key Vault Secret.

func (CertifiateOutput) Tags added in v5.5.0

A mapping of tags to assign to the resource.

func (CertifiateOutput) Thumbprint added in v5.5.0

func (o CertifiateOutput) Thumbprint() pulumi.StringOutput

The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.

func (CertifiateOutput) ToCertifiateOutput

func (o CertifiateOutput) ToCertifiateOutput() CertifiateOutput

func (CertifiateOutput) ToCertifiateOutputWithContext

func (o CertifiateOutput) ToCertifiateOutputWithContext(ctx context.Context) CertifiateOutput

func (CertifiateOutput) Version added in v5.5.0

func (o CertifiateOutput) Version() pulumi.StringOutput

The current version of the Key Vault Certificate.

func (CertifiateOutput) VersionlessId added in v5.5.0

func (o CertifiateOutput) VersionlessId() pulumi.StringOutput

The Base ID of the Key Vault Certificate.

func (CertifiateOutput) VersionlessSecretId added in v5.5.0

func (o CertifiateOutput) VersionlessSecretId() pulumi.StringOutput

The Base ID of the Key Vault Secret.

type CertifiateState

type CertifiateState struct {
	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertifiateCertificatePtrInput
	// A `certificateAttribute` block as defined below.
	CertificateAttributes CertifiateCertificateAttributeArrayInput
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringPtrInput
	// The Base64 encoded Key Vault Certificate data.
	CertificateDataBase64 pulumi.StringPtrInput
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertifiateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceManagerId pulumi.StringPtrInput
	// The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
	ResourceManagerVersionlessId pulumi.StringPtrInput
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringPtrInput
	// The current version of the Key Vault Certificate.
	Version pulumi.StringPtrInput
	// The Base ID of the Key Vault Certificate.
	VersionlessId pulumi.StringPtrInput
	// The Base ID of the Key Vault Secret.
	VersionlessSecretId pulumi.StringPtrInput
}

func (CertifiateState) ElementType

func (CertifiateState) ElementType() reflect.Type

type Certificate

type Certificate struct {
	pulumi.CustomResourceState

	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertificateCertificatePtrOutput `pulumi:"certificate"`
	// A `certificateAttribute` block as defined below.
	CertificateAttributes CertificateCertificateAttributeArrayOutput `pulumi:"certificateAttributes"`
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringOutput `pulumi:"certificateData"`
	// The Base64 encoded Key Vault Certificate data.
	CertificateDataBase64 pulumi.StringOutput `pulumi:"certificateDataBase64"`
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertificateCertificatePolicyOutput `pulumi:"certificatePolicy"`
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceManagerId pulumi.StringOutput `pulumi:"resourceManagerId"`
	// The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
	ResourceManagerVersionlessId pulumi.StringOutput `pulumi:"resourceManagerVersionlessId"`
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringOutput `pulumi:"secretId"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringOutput `pulumi:"thumbprint"`
	// The current version of the Key Vault Certificate.
	Version pulumi.StringOutput `pulumi:"version"`
	// The Base ID of the Key Vault Certificate.
	VersionlessId pulumi.StringOutput `pulumi:"versionlessId"`
	// The Base ID of the Key Vault Secret.
	VersionlessSecretId pulumi.StringOutput `pulumi:"versionlessSecretId"`
}

Manages a Key Vault Certificate.

## Example Usage

### Importing A PFX)

> **Note:** this example assumed the PFX file is located in the same directory at `certificate-to-import.pfx`.

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-std/sdk/go/std"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("examplekeyvault"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("premium"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					CertificatePermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Delete"),
						pulumi.String("DeleteIssuers"),
						pulumi.String("Get"),
						pulumi.String("GetIssuers"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("ListIssuers"),
						pulumi.String("ManageContacts"),
						pulumi.String("ManageIssuers"),
						pulumi.String("SetIssuers"),
						pulumi.String("Update"),
					},
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Create"),
						pulumi.String("Decrypt"),
						pulumi.String("Delete"),
						pulumi.String("Encrypt"),
						pulumi.String("Get"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Sign"),
						pulumi.String("UnwrapKey"),
						pulumi.String("Update"),
						pulumi.String("Verify"),
						pulumi.String("WrapKey"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Delete"),
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Set"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		invokeFilebase64, err := std.Filebase64(ctx, &std.Filebase64Args{
			Input: "certificate-to-import.pfx",
		}, nil)
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificate(ctx, "example", &keyvault.CertificateArgs{
			Name:       pulumi.String("imported-cert"),
			KeyVaultId: exampleKeyVault.ID(),
			Certificate: &keyvault.CertificateCertificateArgs{
				Contents: invokeFilebase64.Result,
				Password: pulumi.String(""),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Generating a new certificate

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                    pulumi.String("examplekeyvault"),
			Location:                example.Location,
			ResourceGroupName:       example.Name,
			TenantId:                pulumi.String(current.TenantId),
			SkuName:                 pulumi.String("standard"),
			SoftDeleteRetentionDays: pulumi.Int(7),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					CertificatePermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Delete"),
						pulumi.String("DeleteIssuers"),
						pulumi.String("Get"),
						pulumi.String("GetIssuers"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("ListIssuers"),
						pulumi.String("ManageContacts"),
						pulumi.String("ManageIssuers"),
						pulumi.String("Purge"),
						pulumi.String("SetIssuers"),
						pulumi.String("Update"),
					},
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Create"),
						pulumi.String("Decrypt"),
						pulumi.String("Delete"),
						pulumi.String("Encrypt"),
						pulumi.String("Get"),
						pulumi.String("Import"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Sign"),
						pulumi.String("UnwrapKey"),
						pulumi.String("Update"),
						pulumi.String("Verify"),
						pulumi.String("WrapKey"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Backup"),
						pulumi.String("Delete"),
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Restore"),
						pulumi.String("Set"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificate(ctx, "example", &keyvault.CertificateArgs{
			Name:       pulumi.String("generated-cert"),
			KeyVaultId: exampleKeyVault.ID(),
			CertificatePolicy: &keyvault.CertificateCertificatePolicyArgs{
				IssuerParameters: &keyvault.CertificateCertificatePolicyIssuerParametersArgs{
					Name: pulumi.String("Self"),
				},
				KeyProperties: &keyvault.CertificateCertificatePolicyKeyPropertiesArgs{
					Exportable: pulumi.Bool(true),
					KeySize:    pulumi.Int(2048),
					KeyType:    pulumi.String("RSA"),
					ReuseKey:   pulumi.Bool(true),
				},
				LifetimeActions: keyvault.CertificateCertificatePolicyLifetimeActionArray{
					&keyvault.CertificateCertificatePolicyLifetimeActionArgs{
						Action: &keyvault.CertificateCertificatePolicyLifetimeActionActionArgs{
							ActionType: pulumi.String("AutoRenew"),
						},
						Trigger: &keyvault.CertificateCertificatePolicyLifetimeActionTriggerArgs{
							DaysBeforeExpiry: pulumi.Int(30),
						},
					},
				},
				SecretProperties: &keyvault.CertificateCertificatePolicySecretPropertiesArgs{
					ContentType: pulumi.String("application/x-pkcs12"),
				},
				X509CertificateProperties: &keyvault.CertificateCertificatePolicyX509CertificatePropertiesArgs{
					ExtendedKeyUsages: pulumi.StringArray{
						pulumi.String("1.3.6.1.5.5.7.3.1"),
					},
					KeyUsages: pulumi.StringArray{
						pulumi.String("cRLSign"),
						pulumi.String("dataEncipherment"),
						pulumi.String("digitalSignature"),
						pulumi.String("keyAgreement"),
						pulumi.String("keyCertSign"),
						pulumi.String("keyEncipherment"),
					},
					SubjectAlternativeNames: &keyvault.CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{
						DnsNames: pulumi.StringArray{
							pulumi.String("internal.contoso.com"),
							pulumi.String("domain.hello.world"),
						},
					},
					Subject:          pulumi.String("CN=hello-world"),
					ValidityInMonths: pulumi.Int(12),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Certificates can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/certificate:Certificate example "https://example-keyvault.vault.azure.net/certificates/example/fdf067c93bbb4b22bff4d8b7a9a56217" ```

func GetCertificate

func GetCertificate(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateState, opts ...pulumi.ResourceOption) (*Certificate, error)

GetCertificate gets an existing Certificate resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificate

func NewCertificate(ctx *pulumi.Context,
	name string, args *CertificateArgs, opts ...pulumi.ResourceOption) (*Certificate, error)

NewCertificate registers a new resource with the given unique name, arguments, and options.

func (*Certificate) ElementType

func (*Certificate) ElementType() reflect.Type

func (*Certificate) ToCertificateOutput

func (i *Certificate) ToCertificateOutput() CertificateOutput

func (*Certificate) ToCertificateOutputWithContext

func (i *Certificate) ToCertificateOutputWithContext(ctx context.Context) CertificateOutput

type CertificateArgs

type CertificateArgs struct {
	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertificateCertificatePtrInput
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertificateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Certificate resource.

func (CertificateArgs) ElementType

func (CertificateArgs) ElementType() reflect.Type

type CertificateArray

type CertificateArray []CertificateInput

func (CertificateArray) ElementType

func (CertificateArray) ElementType() reflect.Type

func (CertificateArray) ToCertificateArrayOutput

func (i CertificateArray) ToCertificateArrayOutput() CertificateArrayOutput

func (CertificateArray) ToCertificateArrayOutputWithContext

func (i CertificateArray) ToCertificateArrayOutputWithContext(ctx context.Context) CertificateArrayOutput

type CertificateArrayInput

type CertificateArrayInput interface {
	pulumi.Input

	ToCertificateArrayOutput() CertificateArrayOutput
	ToCertificateArrayOutputWithContext(context.Context) CertificateArrayOutput
}

CertificateArrayInput is an input type that accepts CertificateArray and CertificateArrayOutput values. You can construct a concrete instance of `CertificateArrayInput` via:

CertificateArray{ CertificateArgs{...} }

type CertificateArrayOutput

type CertificateArrayOutput struct{ *pulumi.OutputState }

func (CertificateArrayOutput) ElementType

func (CertificateArrayOutput) ElementType() reflect.Type

func (CertificateArrayOutput) Index

func (CertificateArrayOutput) ToCertificateArrayOutput

func (o CertificateArrayOutput) ToCertificateArrayOutput() CertificateArrayOutput

func (CertificateArrayOutput) ToCertificateArrayOutputWithContext

func (o CertificateArrayOutput) ToCertificateArrayOutputWithContext(ctx context.Context) CertificateArrayOutput

type CertificateCertificate

type CertificateCertificate struct {
	// The base64-encoded certificate contents.
	Contents string `pulumi:"contents"`
	// The password associated with the certificate.
	//
	// > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
	//
	// To convert a private key to pkcs8 format with openssl use:
	//
	// The PEM content should look something like:
	Password *string `pulumi:"password"`
}

type CertificateCertificateArgs

type CertificateCertificateArgs struct {
	// The base64-encoded certificate contents.
	Contents pulumi.StringInput `pulumi:"contents"`
	// The password associated with the certificate.
	//
	// > **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.
	//
	// To convert a private key to pkcs8 format with openssl use:
	//
	// The PEM content should look something like:
	Password pulumi.StringPtrInput `pulumi:"password"`
}

func (CertificateCertificateArgs) ElementType

func (CertificateCertificateArgs) ElementType() reflect.Type

func (CertificateCertificateArgs) ToCertificateCertificateOutput

func (i CertificateCertificateArgs) ToCertificateCertificateOutput() CertificateCertificateOutput

func (CertificateCertificateArgs) ToCertificateCertificateOutputWithContext

func (i CertificateCertificateArgs) ToCertificateCertificateOutputWithContext(ctx context.Context) CertificateCertificateOutput

func (CertificateCertificateArgs) ToCertificateCertificatePtrOutput

func (i CertificateCertificateArgs) ToCertificateCertificatePtrOutput() CertificateCertificatePtrOutput

func (CertificateCertificateArgs) ToCertificateCertificatePtrOutputWithContext

func (i CertificateCertificateArgs) ToCertificateCertificatePtrOutputWithContext(ctx context.Context) CertificateCertificatePtrOutput

type CertificateCertificateAttribute

type CertificateCertificateAttribute struct {
	// The create time of the Key Vault Certificate.
	Created *string `pulumi:"created"`
	// whether the Key Vault Certificate is enabled.
	Enabled *bool `pulumi:"enabled"`
	// The expires time of the Key Vault Certificate.
	Expires *string `pulumi:"expires"`
	// The not before valid time of the Key Vault Certificate.
	NotBefore *string `pulumi:"notBefore"`
	// The deletion recovery level of the Key Vault Certificate.
	RecoveryLevel *string `pulumi:"recoveryLevel"`
	// The recent update time of the Key Vault Certificate.
	Updated *string `pulumi:"updated"`
}

type CertificateCertificateAttributeArgs

type CertificateCertificateAttributeArgs struct {
	// The create time of the Key Vault Certificate.
	Created pulumi.StringPtrInput `pulumi:"created"`
	// whether the Key Vault Certificate is enabled.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The expires time of the Key Vault Certificate.
	Expires pulumi.StringPtrInput `pulumi:"expires"`
	// The not before valid time of the Key Vault Certificate.
	NotBefore pulumi.StringPtrInput `pulumi:"notBefore"`
	// The deletion recovery level of the Key Vault Certificate.
	RecoveryLevel pulumi.StringPtrInput `pulumi:"recoveryLevel"`
	// The recent update time of the Key Vault Certificate.
	Updated pulumi.StringPtrInput `pulumi:"updated"`
}

func (CertificateCertificateAttributeArgs) ElementType

func (CertificateCertificateAttributeArgs) ToCertificateCertificateAttributeOutput

func (i CertificateCertificateAttributeArgs) ToCertificateCertificateAttributeOutput() CertificateCertificateAttributeOutput

func (CertificateCertificateAttributeArgs) ToCertificateCertificateAttributeOutputWithContext

func (i CertificateCertificateAttributeArgs) ToCertificateCertificateAttributeOutputWithContext(ctx context.Context) CertificateCertificateAttributeOutput

type CertificateCertificateAttributeArray

type CertificateCertificateAttributeArray []CertificateCertificateAttributeInput

func (CertificateCertificateAttributeArray) ElementType

func (CertificateCertificateAttributeArray) ToCertificateCertificateAttributeArrayOutput

func (i CertificateCertificateAttributeArray) ToCertificateCertificateAttributeArrayOutput() CertificateCertificateAttributeArrayOutput

func (CertificateCertificateAttributeArray) ToCertificateCertificateAttributeArrayOutputWithContext

func (i CertificateCertificateAttributeArray) ToCertificateCertificateAttributeArrayOutputWithContext(ctx context.Context) CertificateCertificateAttributeArrayOutput

type CertificateCertificateAttributeArrayInput

type CertificateCertificateAttributeArrayInput interface {
	pulumi.Input

	ToCertificateCertificateAttributeArrayOutput() CertificateCertificateAttributeArrayOutput
	ToCertificateCertificateAttributeArrayOutputWithContext(context.Context) CertificateCertificateAttributeArrayOutput
}

CertificateCertificateAttributeArrayInput is an input type that accepts CertificateCertificateAttributeArray and CertificateCertificateAttributeArrayOutput values. You can construct a concrete instance of `CertificateCertificateAttributeArrayInput` via:

CertificateCertificateAttributeArray{ CertificateCertificateAttributeArgs{...} }

type CertificateCertificateAttributeArrayOutput

type CertificateCertificateAttributeArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificateAttributeArrayOutput) ElementType

func (CertificateCertificateAttributeArrayOutput) Index

func (CertificateCertificateAttributeArrayOutput) ToCertificateCertificateAttributeArrayOutput

func (o CertificateCertificateAttributeArrayOutput) ToCertificateCertificateAttributeArrayOutput() CertificateCertificateAttributeArrayOutput

func (CertificateCertificateAttributeArrayOutput) ToCertificateCertificateAttributeArrayOutputWithContext

func (o CertificateCertificateAttributeArrayOutput) ToCertificateCertificateAttributeArrayOutputWithContext(ctx context.Context) CertificateCertificateAttributeArrayOutput

type CertificateCertificateAttributeInput

type CertificateCertificateAttributeInput interface {
	pulumi.Input

	ToCertificateCertificateAttributeOutput() CertificateCertificateAttributeOutput
	ToCertificateCertificateAttributeOutputWithContext(context.Context) CertificateCertificateAttributeOutput
}

CertificateCertificateAttributeInput is an input type that accepts CertificateCertificateAttributeArgs and CertificateCertificateAttributeOutput values. You can construct a concrete instance of `CertificateCertificateAttributeInput` via:

CertificateCertificateAttributeArgs{...}

type CertificateCertificateAttributeOutput

type CertificateCertificateAttributeOutput struct{ *pulumi.OutputState }

func (CertificateCertificateAttributeOutput) Created

The create time of the Key Vault Certificate.

func (CertificateCertificateAttributeOutput) ElementType

func (CertificateCertificateAttributeOutput) Enabled

whether the Key Vault Certificate is enabled.

func (CertificateCertificateAttributeOutput) Expires

The expires time of the Key Vault Certificate.

func (CertificateCertificateAttributeOutput) NotBefore

The not before valid time of the Key Vault Certificate.

func (CertificateCertificateAttributeOutput) RecoveryLevel

The deletion recovery level of the Key Vault Certificate.

func (CertificateCertificateAttributeOutput) ToCertificateCertificateAttributeOutput

func (o CertificateCertificateAttributeOutput) ToCertificateCertificateAttributeOutput() CertificateCertificateAttributeOutput

func (CertificateCertificateAttributeOutput) ToCertificateCertificateAttributeOutputWithContext

func (o CertificateCertificateAttributeOutput) ToCertificateCertificateAttributeOutputWithContext(ctx context.Context) CertificateCertificateAttributeOutput

func (CertificateCertificateAttributeOutput) Updated

The recent update time of the Key Vault Certificate.

type CertificateCertificateInput

type CertificateCertificateInput interface {
	pulumi.Input

	ToCertificateCertificateOutput() CertificateCertificateOutput
	ToCertificateCertificateOutputWithContext(context.Context) CertificateCertificateOutput
}

CertificateCertificateInput is an input type that accepts CertificateCertificateArgs and CertificateCertificateOutput values. You can construct a concrete instance of `CertificateCertificateInput` via:

CertificateCertificateArgs{...}

type CertificateCertificateOutput

type CertificateCertificateOutput struct{ *pulumi.OutputState }

func (CertificateCertificateOutput) Contents

The base64-encoded certificate contents.

func (CertificateCertificateOutput) ElementType

func (CertificateCertificateOutput) Password

The password associated with the certificate.

> **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.

To convert a private key to pkcs8 format with openssl use:

The PEM content should look something like:

func (CertificateCertificateOutput) ToCertificateCertificateOutput

func (o CertificateCertificateOutput) ToCertificateCertificateOutput() CertificateCertificateOutput

func (CertificateCertificateOutput) ToCertificateCertificateOutputWithContext

func (o CertificateCertificateOutput) ToCertificateCertificateOutputWithContext(ctx context.Context) CertificateCertificateOutput

func (CertificateCertificateOutput) ToCertificateCertificatePtrOutput

func (o CertificateCertificateOutput) ToCertificateCertificatePtrOutput() CertificateCertificatePtrOutput

func (CertificateCertificateOutput) ToCertificateCertificatePtrOutputWithContext

func (o CertificateCertificateOutput) ToCertificateCertificatePtrOutputWithContext(ctx context.Context) CertificateCertificatePtrOutput

type CertificateCertificatePolicy

type CertificateCertificatePolicy struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertificateCertificatePolicyIssuerParameters `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertificateCertificatePolicyKeyProperties `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions []CertificateCertificatePolicyLifetimeAction `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertificateCertificatePolicySecretProperties `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
	X509CertificateProperties *CertificateCertificatePolicyX509CertificateProperties `pulumi:"x509CertificateProperties"`
}

type CertificateCertificatePolicyArgs

type CertificateCertificatePolicyArgs struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertificateCertificatePolicyIssuerParametersInput `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertificateCertificatePolicyKeyPropertiesInput `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions CertificateCertificatePolicyLifetimeActionArrayInput `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertificateCertificatePolicySecretPropertiesInput `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.
	X509CertificateProperties CertificateCertificatePolicyX509CertificatePropertiesPtrInput `pulumi:"x509CertificateProperties"`
}

func (CertificateCertificatePolicyArgs) ElementType

func (CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyOutput

func (i CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyOutput() CertificateCertificatePolicyOutput

func (CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyOutputWithContext

func (i CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyOutputWithContext(ctx context.Context) CertificateCertificatePolicyOutput

func (CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyPtrOutput

func (i CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyPtrOutput() CertificateCertificatePolicyPtrOutput

func (CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyPtrOutputWithContext

func (i CertificateCertificatePolicyArgs) ToCertificateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyPtrOutput

type CertificateCertificatePolicyInput

type CertificateCertificatePolicyInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyOutput() CertificateCertificatePolicyOutput
	ToCertificateCertificatePolicyOutputWithContext(context.Context) CertificateCertificatePolicyOutput
}

CertificateCertificatePolicyInput is an input type that accepts CertificateCertificatePolicyArgs and CertificateCertificatePolicyOutput values. You can construct a concrete instance of `CertificateCertificatePolicyInput` via:

CertificateCertificatePolicyArgs{...}

type CertificateCertificatePolicyIssuerParameters

type CertificateCertificatePolicyIssuerParameters struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
	Name string `pulumi:"name"`
}

type CertificateCertificatePolicyIssuerParametersArgs

type CertificateCertificatePolicyIssuerParametersArgs struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).
	Name pulumi.StringInput `pulumi:"name"`
}

func (CertificateCertificatePolicyIssuerParametersArgs) ElementType

func (CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersOutput

func (i CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersOutput() CertificateCertificatePolicyIssuerParametersOutput

func (CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersOutputWithContext

func (i CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersOutputWithContext(ctx context.Context) CertificateCertificatePolicyIssuerParametersOutput

func (CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersPtrOutput

func (i CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersPtrOutput() CertificateCertificatePolicyIssuerParametersPtrOutput

func (CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext

func (i CertificateCertificatePolicyIssuerParametersArgs) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyIssuerParametersPtrOutput

type CertificateCertificatePolicyIssuerParametersInput

type CertificateCertificatePolicyIssuerParametersInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyIssuerParametersOutput() CertificateCertificatePolicyIssuerParametersOutput
	ToCertificateCertificatePolicyIssuerParametersOutputWithContext(context.Context) CertificateCertificatePolicyIssuerParametersOutput
}

CertificateCertificatePolicyIssuerParametersInput is an input type that accepts CertificateCertificatePolicyIssuerParametersArgs and CertificateCertificatePolicyIssuerParametersOutput values. You can construct a concrete instance of `CertificateCertificatePolicyIssuerParametersInput` via:

CertificateCertificatePolicyIssuerParametersArgs{...}

type CertificateCertificatePolicyIssuerParametersOutput

type CertificateCertificatePolicyIssuerParametersOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyIssuerParametersOutput) ElementType

func (CertificateCertificatePolicyIssuerParametersOutput) Name

The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).

func (CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersOutput

func (o CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersOutput() CertificateCertificatePolicyIssuerParametersOutput

func (CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersOutputWithContext

func (o CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersOutputWithContext(ctx context.Context) CertificateCertificatePolicyIssuerParametersOutput

func (CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutput

func (o CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutput() CertificateCertificatePolicyIssuerParametersPtrOutput

func (CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext

func (o CertificateCertificatePolicyIssuerParametersOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyIssuerParametersPtrOutput

type CertificateCertificatePolicyIssuerParametersPtrInput

type CertificateCertificatePolicyIssuerParametersPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyIssuerParametersPtrOutput() CertificateCertificatePolicyIssuerParametersPtrOutput
	ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext(context.Context) CertificateCertificatePolicyIssuerParametersPtrOutput
}

CertificateCertificatePolicyIssuerParametersPtrInput is an input type that accepts CertificateCertificatePolicyIssuerParametersArgs, CertificateCertificatePolicyIssuerParametersPtr and CertificateCertificatePolicyIssuerParametersPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicyIssuerParametersPtrInput` via:

        CertificateCertificatePolicyIssuerParametersArgs{...}

or:

        nil

type CertificateCertificatePolicyIssuerParametersPtrOutput

type CertificateCertificatePolicyIssuerParametersPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyIssuerParametersPtrOutput) Elem

func (CertificateCertificatePolicyIssuerParametersPtrOutput) ElementType

func (CertificateCertificatePolicyIssuerParametersPtrOutput) Name

The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones).

func (CertificateCertificatePolicyIssuerParametersPtrOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutput

func (CertificateCertificatePolicyIssuerParametersPtrOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext

func (o CertificateCertificatePolicyIssuerParametersPtrOutput) ToCertificateCertificatePolicyIssuerParametersPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyIssuerParametersPtrOutput

type CertificateCertificatePolicyKeyProperties

type CertificateCertificatePolicyKeyProperties struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
	Curve *string `pulumi:"curve"`
	// Is this certificate exportable?
	Exportable bool `pulumi:"exportable"`
	// The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
	KeySize *int `pulumi:"keySize"`
	// Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
	KeyType string `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey bool `pulumi:"reuseKey"`
}

type CertificateCertificatePolicyKeyPropertiesArgs

type CertificateCertificatePolicyKeyPropertiesArgs struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.
	Curve pulumi.StringPtrInput `pulumi:"curve"`
	// Is this certificate exportable?
	Exportable pulumi.BoolInput `pulumi:"exportable"`
	// The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.
	KeySize pulumi.IntPtrInput `pulumi:"keySize"`
	// Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.
	KeyType pulumi.StringInput `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey pulumi.BoolInput `pulumi:"reuseKey"`
}

func (CertificateCertificatePolicyKeyPropertiesArgs) ElementType

func (CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesOutput

func (i CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesOutput() CertificateCertificatePolicyKeyPropertiesOutput

func (CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesOutputWithContext

func (i CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicyKeyPropertiesOutput

func (CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesPtrOutput

func (i CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesPtrOutput() CertificateCertificatePolicyKeyPropertiesPtrOutput

func (CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (i CertificateCertificatePolicyKeyPropertiesArgs) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyKeyPropertiesPtrOutput

type CertificateCertificatePolicyKeyPropertiesInput

type CertificateCertificatePolicyKeyPropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyKeyPropertiesOutput() CertificateCertificatePolicyKeyPropertiesOutput
	ToCertificateCertificatePolicyKeyPropertiesOutputWithContext(context.Context) CertificateCertificatePolicyKeyPropertiesOutput
}

CertificateCertificatePolicyKeyPropertiesInput is an input type that accepts CertificateCertificatePolicyKeyPropertiesArgs and CertificateCertificatePolicyKeyPropertiesOutput values. You can construct a concrete instance of `CertificateCertificatePolicyKeyPropertiesInput` via:

CertificateCertificatePolicyKeyPropertiesArgs{...}

type CertificateCertificatePolicyKeyPropertiesOutput

type CertificateCertificatePolicyKeyPropertiesOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyKeyPropertiesOutput) Curve

Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.

func (CertificateCertificatePolicyKeyPropertiesOutput) ElementType

func (CertificateCertificatePolicyKeyPropertiesOutput) Exportable

Is this certificate exportable?

func (CertificateCertificatePolicyKeyPropertiesOutput) KeySize

The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.

func (CertificateCertificatePolicyKeyPropertiesOutput) KeyType

Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.

func (CertificateCertificatePolicyKeyPropertiesOutput) ReuseKey

Is the key reusable?

func (CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesOutput

func (o CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesOutput() CertificateCertificatePolicyKeyPropertiesOutput

func (CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesOutputWithContext

func (o CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicyKeyPropertiesOutput

func (CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutput

func (o CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutput() CertificateCertificatePolicyKeyPropertiesPtrOutput

func (CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (o CertificateCertificatePolicyKeyPropertiesOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyKeyPropertiesPtrOutput

type CertificateCertificatePolicyKeyPropertiesPtrInput

type CertificateCertificatePolicyKeyPropertiesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyKeyPropertiesPtrOutput() CertificateCertificatePolicyKeyPropertiesPtrOutput
	ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext(context.Context) CertificateCertificatePolicyKeyPropertiesPtrOutput
}

CertificateCertificatePolicyKeyPropertiesPtrInput is an input type that accepts CertificateCertificatePolicyKeyPropertiesArgs, CertificateCertificatePolicyKeyPropertiesPtr and CertificateCertificatePolicyKeyPropertiesPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicyKeyPropertiesPtrInput` via:

        CertificateCertificatePolicyKeyPropertiesArgs{...}

or:

        nil

type CertificateCertificatePolicyKeyPropertiesPtrOutput

type CertificateCertificatePolicyKeyPropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) Curve

Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`.

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) Elem

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) ElementType

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) Exportable

Is this certificate exportable?

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) KeySize

The size of the key used in the certificate. Possible values include `2048`, `3072`, and `4096` for `RSA` keys, or `256`, `384`, and `521` for `EC` keys. This property is required when using RSA keys.

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) KeyType

Specifies the type of key. Possible values are `EC`, `EC-HSM`, `RSA`, `RSA-HSM` and `oct`.

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) ReuseKey

Is the key reusable?

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutput

func (o CertificateCertificatePolicyKeyPropertiesPtrOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutput() CertificateCertificatePolicyKeyPropertiesPtrOutput

func (CertificateCertificatePolicyKeyPropertiesPtrOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext

func (o CertificateCertificatePolicyKeyPropertiesPtrOutput) ToCertificateCertificatePolicyKeyPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyKeyPropertiesPtrOutput

type CertificateCertificatePolicyLifetimeAction

type CertificateCertificatePolicyLifetimeAction struct {
	// A `action` block as defined below.
	Action CertificateCertificatePolicyLifetimeActionAction `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertificateCertificatePolicyLifetimeActionTrigger `pulumi:"trigger"`
}

type CertificateCertificatePolicyLifetimeActionAction

type CertificateCertificatePolicyLifetimeActionAction struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
	ActionType string `pulumi:"actionType"`
}

type CertificateCertificatePolicyLifetimeActionActionArgs

type CertificateCertificatePolicyLifetimeActionActionArgs struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.
	ActionType pulumi.StringInput `pulumi:"actionType"`
}

func (CertificateCertificatePolicyLifetimeActionActionArgs) ElementType

func (CertificateCertificatePolicyLifetimeActionActionArgs) ToCertificateCertificatePolicyLifetimeActionActionOutput

func (i CertificateCertificatePolicyLifetimeActionActionArgs) ToCertificateCertificatePolicyLifetimeActionActionOutput() CertificateCertificatePolicyLifetimeActionActionOutput

func (CertificateCertificatePolicyLifetimeActionActionArgs) ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext

func (i CertificateCertificatePolicyLifetimeActionActionArgs) ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionActionOutput

type CertificateCertificatePolicyLifetimeActionActionInput

type CertificateCertificatePolicyLifetimeActionActionInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionActionOutput() CertificateCertificatePolicyLifetimeActionActionOutput
	ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionActionOutput
}

CertificateCertificatePolicyLifetimeActionActionInput is an input type that accepts CertificateCertificatePolicyLifetimeActionActionArgs and CertificateCertificatePolicyLifetimeActionActionOutput values. You can construct a concrete instance of `CertificateCertificatePolicyLifetimeActionActionInput` via:

CertificateCertificatePolicyLifetimeActionActionArgs{...}

type CertificateCertificatePolicyLifetimeActionActionOutput

type CertificateCertificatePolicyLifetimeActionActionOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyLifetimeActionActionOutput) ActionType

The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`.

func (CertificateCertificatePolicyLifetimeActionActionOutput) ElementType

func (CertificateCertificatePolicyLifetimeActionActionOutput) ToCertificateCertificatePolicyLifetimeActionActionOutput

func (CertificateCertificatePolicyLifetimeActionActionOutput) ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext

func (o CertificateCertificatePolicyLifetimeActionActionOutput) ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionActionOutput

type CertificateCertificatePolicyLifetimeActionArgs

type CertificateCertificatePolicyLifetimeActionArgs struct {
	// A `action` block as defined below.
	Action CertificateCertificatePolicyLifetimeActionActionInput `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertificateCertificatePolicyLifetimeActionTriggerInput `pulumi:"trigger"`
}

func (CertificateCertificatePolicyLifetimeActionArgs) ElementType

func (CertificateCertificatePolicyLifetimeActionArgs) ToCertificateCertificatePolicyLifetimeActionOutput

func (i CertificateCertificatePolicyLifetimeActionArgs) ToCertificateCertificatePolicyLifetimeActionOutput() CertificateCertificatePolicyLifetimeActionOutput

func (CertificateCertificatePolicyLifetimeActionArgs) ToCertificateCertificatePolicyLifetimeActionOutputWithContext

func (i CertificateCertificatePolicyLifetimeActionArgs) ToCertificateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionOutput

type CertificateCertificatePolicyLifetimeActionArray

type CertificateCertificatePolicyLifetimeActionArray []CertificateCertificatePolicyLifetimeActionInput

func (CertificateCertificatePolicyLifetimeActionArray) ElementType

func (CertificateCertificatePolicyLifetimeActionArray) ToCertificateCertificatePolicyLifetimeActionArrayOutput

func (i CertificateCertificatePolicyLifetimeActionArray) ToCertificateCertificatePolicyLifetimeActionArrayOutput() CertificateCertificatePolicyLifetimeActionArrayOutput

func (CertificateCertificatePolicyLifetimeActionArray) ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext

func (i CertificateCertificatePolicyLifetimeActionArray) ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionArrayOutput

type CertificateCertificatePolicyLifetimeActionArrayInput

type CertificateCertificatePolicyLifetimeActionArrayInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionArrayOutput() CertificateCertificatePolicyLifetimeActionArrayOutput
	ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionArrayOutput
}

CertificateCertificatePolicyLifetimeActionArrayInput is an input type that accepts CertificateCertificatePolicyLifetimeActionArray and CertificateCertificatePolicyLifetimeActionArrayOutput values. You can construct a concrete instance of `CertificateCertificatePolicyLifetimeActionArrayInput` via:

CertificateCertificatePolicyLifetimeActionArray{ CertificateCertificatePolicyLifetimeActionArgs{...} }

type CertificateCertificatePolicyLifetimeActionArrayOutput

type CertificateCertificatePolicyLifetimeActionArrayOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyLifetimeActionArrayOutput) ElementType

func (CertificateCertificatePolicyLifetimeActionArrayOutput) Index

func (CertificateCertificatePolicyLifetimeActionArrayOutput) ToCertificateCertificatePolicyLifetimeActionArrayOutput

func (CertificateCertificatePolicyLifetimeActionArrayOutput) ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext

func (o CertificateCertificatePolicyLifetimeActionArrayOutput) ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionArrayOutput

type CertificateCertificatePolicyLifetimeActionInput

type CertificateCertificatePolicyLifetimeActionInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionOutput() CertificateCertificatePolicyLifetimeActionOutput
	ToCertificateCertificatePolicyLifetimeActionOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionOutput
}

CertificateCertificatePolicyLifetimeActionInput is an input type that accepts CertificateCertificatePolicyLifetimeActionArgs and CertificateCertificatePolicyLifetimeActionOutput values. You can construct a concrete instance of `CertificateCertificatePolicyLifetimeActionInput` via:

CertificateCertificatePolicyLifetimeActionArgs{...}

type CertificateCertificatePolicyLifetimeActionOutput

type CertificateCertificatePolicyLifetimeActionOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyLifetimeActionOutput) Action

A `action` block as defined below.

func (CertificateCertificatePolicyLifetimeActionOutput) ElementType

func (CertificateCertificatePolicyLifetimeActionOutput) ToCertificateCertificatePolicyLifetimeActionOutput

func (o CertificateCertificatePolicyLifetimeActionOutput) ToCertificateCertificatePolicyLifetimeActionOutput() CertificateCertificatePolicyLifetimeActionOutput

func (CertificateCertificatePolicyLifetimeActionOutput) ToCertificateCertificatePolicyLifetimeActionOutputWithContext

func (o CertificateCertificatePolicyLifetimeActionOutput) ToCertificateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionOutput

func (CertificateCertificatePolicyLifetimeActionOutput) Trigger

A `trigger` block as defined below.

type CertificateCertificatePolicyLifetimeActionTrigger

type CertificateCertificatePolicyLifetimeActionTrigger struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry *int `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage *int `pulumi:"lifetimePercentage"`
}

type CertificateCertificatePolicyLifetimeActionTriggerArgs

type CertificateCertificatePolicyLifetimeActionTriggerArgs struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry pulumi.IntPtrInput `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage pulumi.IntPtrInput `pulumi:"lifetimePercentage"`
}

func (CertificateCertificatePolicyLifetimeActionTriggerArgs) ElementType

func (CertificateCertificatePolicyLifetimeActionTriggerArgs) ToCertificateCertificatePolicyLifetimeActionTriggerOutput

func (i CertificateCertificatePolicyLifetimeActionTriggerArgs) ToCertificateCertificatePolicyLifetimeActionTriggerOutput() CertificateCertificatePolicyLifetimeActionTriggerOutput

func (CertificateCertificatePolicyLifetimeActionTriggerArgs) ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (i CertificateCertificatePolicyLifetimeActionTriggerArgs) ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionTriggerOutput

type CertificateCertificatePolicyLifetimeActionTriggerInput

type CertificateCertificatePolicyLifetimeActionTriggerInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionTriggerOutput() CertificateCertificatePolicyLifetimeActionTriggerOutput
	ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionTriggerOutput
}

CertificateCertificatePolicyLifetimeActionTriggerInput is an input type that accepts CertificateCertificatePolicyLifetimeActionTriggerArgs and CertificateCertificatePolicyLifetimeActionTriggerOutput values. You can construct a concrete instance of `CertificateCertificatePolicyLifetimeActionTriggerInput` via:

CertificateCertificatePolicyLifetimeActionTriggerArgs{...}

type CertificateCertificatePolicyLifetimeActionTriggerOutput

type CertificateCertificatePolicyLifetimeActionTriggerOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyLifetimeActionTriggerOutput) DaysBeforeExpiry

The number of days before the Certificate expires that the action associated with this Trigger should run. Conflicts with `lifetimePercentage`.

func (CertificateCertificatePolicyLifetimeActionTriggerOutput) ElementType

func (CertificateCertificatePolicyLifetimeActionTriggerOutput) LifetimePercentage

The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Conflicts with `daysBeforeExpiry`.

func (CertificateCertificatePolicyLifetimeActionTriggerOutput) ToCertificateCertificatePolicyLifetimeActionTriggerOutput

func (CertificateCertificatePolicyLifetimeActionTriggerOutput) ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (o CertificateCertificatePolicyLifetimeActionTriggerOutput) ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) CertificateCertificatePolicyLifetimeActionTriggerOutput

type CertificateCertificatePolicyOutput

type CertificateCertificatePolicyOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyOutput) ElementType

func (CertificateCertificatePolicyOutput) IssuerParameters

A `issuerParameters` block as defined below.

func (CertificateCertificatePolicyOutput) KeyProperties

A `keyProperties` block as defined below.

func (CertificateCertificatePolicyOutput) LifetimeActions

A `lifetimeAction` block as defined below.

func (CertificateCertificatePolicyOutput) SecretProperties

A `secretProperties` block as defined below.

func (CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyOutput

func (o CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyOutput() CertificateCertificatePolicyOutput

func (CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyOutputWithContext

func (o CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyOutputWithContext(ctx context.Context) CertificateCertificatePolicyOutput

func (CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyPtrOutput

func (o CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyPtrOutput() CertificateCertificatePolicyPtrOutput

func (CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyPtrOutputWithContext

func (o CertificateCertificatePolicyOutput) ToCertificateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyPtrOutput

func (CertificateCertificatePolicyOutput) X509CertificateProperties

A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.

type CertificateCertificatePolicyPtrInput

type CertificateCertificatePolicyPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyPtrOutput() CertificateCertificatePolicyPtrOutput
	ToCertificateCertificatePolicyPtrOutputWithContext(context.Context) CertificateCertificatePolicyPtrOutput
}

CertificateCertificatePolicyPtrInput is an input type that accepts CertificateCertificatePolicyArgs, CertificateCertificatePolicyPtr and CertificateCertificatePolicyPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicyPtrInput` via:

        CertificateCertificatePolicyArgs{...}

or:

        nil

type CertificateCertificatePolicyPtrOutput

type CertificateCertificatePolicyPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyPtrOutput) Elem

func (CertificateCertificatePolicyPtrOutput) ElementType

func (CertificateCertificatePolicyPtrOutput) IssuerParameters

A `issuerParameters` block as defined below.

func (CertificateCertificatePolicyPtrOutput) KeyProperties

A `keyProperties` block as defined below.

func (CertificateCertificatePolicyPtrOutput) LifetimeActions

A `lifetimeAction` block as defined below.

func (CertificateCertificatePolicyPtrOutput) SecretProperties

A `secretProperties` block as defined below.

func (CertificateCertificatePolicyPtrOutput) ToCertificateCertificatePolicyPtrOutput

func (o CertificateCertificatePolicyPtrOutput) ToCertificateCertificatePolicyPtrOutput() CertificateCertificatePolicyPtrOutput

func (CertificateCertificatePolicyPtrOutput) ToCertificateCertificatePolicyPtrOutputWithContext

func (o CertificateCertificatePolicyPtrOutput) ToCertificateCertificatePolicyPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyPtrOutput

func (CertificateCertificatePolicyPtrOutput) X509CertificateProperties

A `x509CertificateProperties` block as defined below. Required when `certificate` block is not specified.

type CertificateCertificatePolicySecretProperties

type CertificateCertificatePolicySecretProperties struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType string `pulumi:"contentType"`
}

type CertificateCertificatePolicySecretPropertiesArgs

type CertificateCertificatePolicySecretPropertiesArgs struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType pulumi.StringInput `pulumi:"contentType"`
}

func (CertificateCertificatePolicySecretPropertiesArgs) ElementType

func (CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesOutput

func (i CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesOutput() CertificateCertificatePolicySecretPropertiesOutput

func (CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesOutputWithContext

func (i CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicySecretPropertiesOutput

func (CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesPtrOutput

func (i CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesPtrOutput() CertificateCertificatePolicySecretPropertiesPtrOutput

func (CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext

func (i CertificateCertificatePolicySecretPropertiesArgs) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicySecretPropertiesPtrOutput

type CertificateCertificatePolicySecretPropertiesInput

type CertificateCertificatePolicySecretPropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicySecretPropertiesOutput() CertificateCertificatePolicySecretPropertiesOutput
	ToCertificateCertificatePolicySecretPropertiesOutputWithContext(context.Context) CertificateCertificatePolicySecretPropertiesOutput
}

CertificateCertificatePolicySecretPropertiesInput is an input type that accepts CertificateCertificatePolicySecretPropertiesArgs and CertificateCertificatePolicySecretPropertiesOutput values. You can construct a concrete instance of `CertificateCertificatePolicySecretPropertiesInput` via:

CertificateCertificatePolicySecretPropertiesArgs{...}

type CertificateCertificatePolicySecretPropertiesOutput

type CertificateCertificatePolicySecretPropertiesOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicySecretPropertiesOutput) ContentType

The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.

func (CertificateCertificatePolicySecretPropertiesOutput) ElementType

func (CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesOutput

func (o CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesOutput() CertificateCertificatePolicySecretPropertiesOutput

func (CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesOutputWithContext

func (o CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicySecretPropertiesOutput

func (CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutput

func (o CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutput() CertificateCertificatePolicySecretPropertiesPtrOutput

func (CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext

func (o CertificateCertificatePolicySecretPropertiesOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicySecretPropertiesPtrOutput

type CertificateCertificatePolicySecretPropertiesPtrInput

type CertificateCertificatePolicySecretPropertiesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicySecretPropertiesPtrOutput() CertificateCertificatePolicySecretPropertiesPtrOutput
	ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext(context.Context) CertificateCertificatePolicySecretPropertiesPtrOutput
}

CertificateCertificatePolicySecretPropertiesPtrInput is an input type that accepts CertificateCertificatePolicySecretPropertiesArgs, CertificateCertificatePolicySecretPropertiesPtr and CertificateCertificatePolicySecretPropertiesPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicySecretPropertiesPtrInput` via:

        CertificateCertificatePolicySecretPropertiesArgs{...}

or:

        nil

type CertificateCertificatePolicySecretPropertiesPtrOutput

type CertificateCertificatePolicySecretPropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicySecretPropertiesPtrOutput) ContentType

The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.

func (CertificateCertificatePolicySecretPropertiesPtrOutput) Elem

func (CertificateCertificatePolicySecretPropertiesPtrOutput) ElementType

func (CertificateCertificatePolicySecretPropertiesPtrOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutput

func (CertificateCertificatePolicySecretPropertiesPtrOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext

func (o CertificateCertificatePolicySecretPropertiesPtrOutput) ToCertificateCertificatePolicySecretPropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicySecretPropertiesPtrOutput

type CertificateCertificatePolicyX509CertificateProperties

type CertificateCertificatePolicyX509CertificateProperties struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages []string `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
	KeyUsages []string `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject string `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames *CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths int `pulumi:"validityInMonths"`
}

type CertificateCertificatePolicyX509CertificatePropertiesArgs

type CertificateCertificatePolicyX509CertificatePropertiesArgs struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages pulumi.StringArrayInput `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.
	KeyUsages pulumi.StringArrayInput `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject pulumi.StringInput `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths pulumi.IntInput `pulumi:"validityInMonths"`
}

func (CertificateCertificatePolicyX509CertificatePropertiesArgs) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext

func (i CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicyX509CertificatePropertiesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (i CertificateCertificatePolicyX509CertificatePropertiesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyX509CertificatePropertiesPtrOutput

type CertificateCertificatePolicyX509CertificatePropertiesInput

type CertificateCertificatePolicyX509CertificatePropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesOutput() CertificateCertificatePolicyX509CertificatePropertiesOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesOutput
}

CertificateCertificatePolicyX509CertificatePropertiesInput is an input type that accepts CertificateCertificatePolicyX509CertificatePropertiesArgs and CertificateCertificatePolicyX509CertificatePropertiesOutput values. You can construct a concrete instance of `CertificateCertificatePolicyX509CertificatePropertiesInput` via:

CertificateCertificatePolicyX509CertificatePropertiesArgs{...}

type CertificateCertificatePolicyX509CertificatePropertiesOutput

type CertificateCertificatePolicyX509CertificatePropertiesOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ExtendedKeyUsages

A list of Extended/Enhanced Key Usages.

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) KeyUsages

A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) Subject

The Certificate's Subject.

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) SubjectAlternativeNames

A `subjectAlternativeNames` block as defined below.

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext

func (o CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext(ctx context.Context) CertificateCertificatePolicyX509CertificatePropertiesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (o CertificateCertificatePolicyX509CertificatePropertiesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesOutput) ValidityInMonths

The Certificates Validity Period in Months.

type CertificateCertificatePolicyX509CertificatePropertiesPtrInput

type CertificateCertificatePolicyX509CertificatePropertiesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutput() CertificateCertificatePolicyX509CertificatePropertiesPtrOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesPtrOutput
}

CertificateCertificatePolicyX509CertificatePropertiesPtrInput is an input type that accepts CertificateCertificatePolicyX509CertificatePropertiesArgs, CertificateCertificatePolicyX509CertificatePropertiesPtr and CertificateCertificatePolicyX509CertificatePropertiesPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicyX509CertificatePropertiesPtrInput` via:

        CertificateCertificatePolicyX509CertificatePropertiesArgs{...}

or:

        nil

type CertificateCertificatePolicyX509CertificatePropertiesPtrOutput

type CertificateCertificatePolicyX509CertificatePropertiesPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) Elem

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ExtendedKeyUsages

A list of Extended/Enhanced Key Usages.

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) KeyUsages

A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive.

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) Subject

The Certificate's Subject.

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) SubjectAlternativeNames

A `subjectAlternativeNames` block as defined below.

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext

func (o CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(ctx context.Context) CertificateCertificatePolicyX509CertificatePropertiesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesPtrOutput) ValidityInMonths

The Certificates Validity Period in Months.

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames []string `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails []string `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns []string `pulumi:"upns"`
}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails pulumi.StringArrayInput `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns pulumi.StringArrayInput `pulumi:"upns"`
}

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput() CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
}

CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput is an input type that accepts CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs and CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput values. You can construct a concrete instance of `CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput` via:

CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{...}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) DnsNames

A list of alternative DNS names (FQDNs) identified by the Certificate.

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) Emails

A list of email addresses identified by this Certificate.

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput) Upns

A list of User Principal Names identified by the Certificate.

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput() CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
}

CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput is an input type that accepts CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs, CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtr and CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput values. You can construct a concrete instance of `CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput` via:

        CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs{...}

or:

        nil

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) DnsNames

A list of alternative DNS names (FQDNs) identified by the Certificate.

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ElementType

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) Emails

A list of email addresses identified by this Certificate.

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext

func (CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput) Upns

A list of User Principal Names identified by the Certificate.

type CertificateCertificatePtrInput

type CertificateCertificatePtrInput interface {
	pulumi.Input

	ToCertificateCertificatePtrOutput() CertificateCertificatePtrOutput
	ToCertificateCertificatePtrOutputWithContext(context.Context) CertificateCertificatePtrOutput
}

CertificateCertificatePtrInput is an input type that accepts CertificateCertificateArgs, CertificateCertificatePtr and CertificateCertificatePtrOutput values. You can construct a concrete instance of `CertificateCertificatePtrInput` via:

        CertificateCertificateArgs{...}

or:

        nil

type CertificateCertificatePtrOutput

type CertificateCertificatePtrOutput struct{ *pulumi.OutputState }

func (CertificateCertificatePtrOutput) Contents

The base64-encoded certificate contents.

func (CertificateCertificatePtrOutput) Elem

func (CertificateCertificatePtrOutput) ElementType

func (CertificateCertificatePtrOutput) Password

The password associated with the certificate.

> **NOTE:** A PEM certificate is already base64 encoded. To successfully import, the `contents` property should include a PEM encoded X509 certificate and a privateKey in pkcs8 format. There should only be linux style `\n` line endings and the whole block should have the PEM begin/end blocks around the certificate data and the private key data.

To convert a private key to pkcs8 format with openssl use:

The PEM content should look something like:

func (CertificateCertificatePtrOutput) ToCertificateCertificatePtrOutput

func (o CertificateCertificatePtrOutput) ToCertificateCertificatePtrOutput() CertificateCertificatePtrOutput

func (CertificateCertificatePtrOutput) ToCertificateCertificatePtrOutputWithContext

func (o CertificateCertificatePtrOutput) ToCertificateCertificatePtrOutputWithContext(ctx context.Context) CertificateCertificatePtrOutput

type CertificateContacts added in v5.29.0

type CertificateContacts struct {
	pulumi.CustomResourceState

	// One or more `contact` blocks as defined below.
	// -->
	Contacts CertificateContactsContactArrayOutput `pulumi:"contacts"`
	// The ID of the Key Vault. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
}

Manages Key Vault Certificate Contacts.

## Disclaimers

<!-- TODO: Remove Note in 4.0 --> > **Note:** It's possible to define Key Vault Certificate Contacts both within the `keyvault.KeyVault` resource via the `contact` block and by using the `keyvault.CertificateContacts` resource. However it's not possible to use both methods to manage Certificate Contacts within a KeyVault, since there'll be conflicts.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("examplekeyvault"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("premium"),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewAccessPolicy(ctx, "example", &keyvault.AccessPolicyArgs{
			KeyVaultId: exampleKeyVault.ID(),
			TenantId:   pulumi.String(current.TenantId),
			ObjectId:   pulumi.String(current.ObjectId),
			CertificatePermissions: pulumi.StringArray{
				pulumi.String("ManageContacts"),
			},
			KeyPermissions: pulumi.StringArray{
				pulumi.String("Create"),
			},
			SecretPermissions: pulumi.StringArray{
				pulumi.String("Set"),
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificateContacts(ctx, "example", &keyvault.CertificateContactsArgs{
			KeyVaultId: exampleKeyVault.ID(),
			Contacts: keyvault.CertificateContactsContactArray{
				&keyvault.CertificateContactsContactArgs{
					Email: pulumi.String("example@example.com"),
					Name:  pulumi.String("example"),
					Phone: pulumi.String("01234567890"),
				},
				&keyvault.CertificateContactsContactArgs{
					Email: pulumi.String("example2@example.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Certificate Contacts can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/certificateContacts:CertificateContacts example https://example-keyvault.vault.azure.net/certificates/contacts ```

func GetCertificateContacts added in v5.29.0

func GetCertificateContacts(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateContactsState, opts ...pulumi.ResourceOption) (*CertificateContacts, error)

GetCertificateContacts gets an existing CertificateContacts resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateContacts added in v5.29.0

func NewCertificateContacts(ctx *pulumi.Context,
	name string, args *CertificateContactsArgs, opts ...pulumi.ResourceOption) (*CertificateContacts, error)

NewCertificateContacts registers a new resource with the given unique name, arguments, and options.

func (*CertificateContacts) ElementType added in v5.29.0

func (*CertificateContacts) ElementType() reflect.Type

func (*CertificateContacts) ToCertificateContactsOutput added in v5.29.0

func (i *CertificateContacts) ToCertificateContactsOutput() CertificateContactsOutput

func (*CertificateContacts) ToCertificateContactsOutputWithContext added in v5.29.0

func (i *CertificateContacts) ToCertificateContactsOutputWithContext(ctx context.Context) CertificateContactsOutput

type CertificateContactsArgs added in v5.29.0

type CertificateContactsArgs struct {
	// One or more `contact` blocks as defined below.
	// -->
	Contacts CertificateContactsContactArrayInput
	// The ID of the Key Vault. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
}

The set of arguments for constructing a CertificateContacts resource.

func (CertificateContactsArgs) ElementType added in v5.29.0

func (CertificateContactsArgs) ElementType() reflect.Type

type CertificateContactsArray added in v5.29.0

type CertificateContactsArray []CertificateContactsInput

func (CertificateContactsArray) ElementType added in v5.29.0

func (CertificateContactsArray) ElementType() reflect.Type

func (CertificateContactsArray) ToCertificateContactsArrayOutput added in v5.29.0

func (i CertificateContactsArray) ToCertificateContactsArrayOutput() CertificateContactsArrayOutput

func (CertificateContactsArray) ToCertificateContactsArrayOutputWithContext added in v5.29.0

func (i CertificateContactsArray) ToCertificateContactsArrayOutputWithContext(ctx context.Context) CertificateContactsArrayOutput

type CertificateContactsArrayInput added in v5.29.0

type CertificateContactsArrayInput interface {
	pulumi.Input

	ToCertificateContactsArrayOutput() CertificateContactsArrayOutput
	ToCertificateContactsArrayOutputWithContext(context.Context) CertificateContactsArrayOutput
}

CertificateContactsArrayInput is an input type that accepts CertificateContactsArray and CertificateContactsArrayOutput values. You can construct a concrete instance of `CertificateContactsArrayInput` via:

CertificateContactsArray{ CertificateContactsArgs{...} }

type CertificateContactsArrayOutput added in v5.29.0

type CertificateContactsArrayOutput struct{ *pulumi.OutputState }

func (CertificateContactsArrayOutput) ElementType added in v5.29.0

func (CertificateContactsArrayOutput) Index added in v5.29.0

func (CertificateContactsArrayOutput) ToCertificateContactsArrayOutput added in v5.29.0

func (o CertificateContactsArrayOutput) ToCertificateContactsArrayOutput() CertificateContactsArrayOutput

func (CertificateContactsArrayOutput) ToCertificateContactsArrayOutputWithContext added in v5.29.0

func (o CertificateContactsArrayOutput) ToCertificateContactsArrayOutputWithContext(ctx context.Context) CertificateContactsArrayOutput

type CertificateContactsContact added in v5.29.0

type CertificateContactsContact struct {
	// E-mail address of the contact.
	Email string `pulumi:"email"`
	// Name of the contact.
	Name *string `pulumi:"name"`
	// Phone number of the contact.
	Phone *string `pulumi:"phone"`
}

type CertificateContactsContactArgs added in v5.29.0

type CertificateContactsContactArgs struct {
	// E-mail address of the contact.
	Email pulumi.StringInput `pulumi:"email"`
	// Name of the contact.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Phone number of the contact.
	Phone pulumi.StringPtrInput `pulumi:"phone"`
}

func (CertificateContactsContactArgs) ElementType added in v5.29.0

func (CertificateContactsContactArgs) ToCertificateContactsContactOutput added in v5.29.0

func (i CertificateContactsContactArgs) ToCertificateContactsContactOutput() CertificateContactsContactOutput

func (CertificateContactsContactArgs) ToCertificateContactsContactOutputWithContext added in v5.29.0

func (i CertificateContactsContactArgs) ToCertificateContactsContactOutputWithContext(ctx context.Context) CertificateContactsContactOutput

type CertificateContactsContactArray added in v5.29.0

type CertificateContactsContactArray []CertificateContactsContactInput

func (CertificateContactsContactArray) ElementType added in v5.29.0

func (CertificateContactsContactArray) ToCertificateContactsContactArrayOutput added in v5.29.0

func (i CertificateContactsContactArray) ToCertificateContactsContactArrayOutput() CertificateContactsContactArrayOutput

func (CertificateContactsContactArray) ToCertificateContactsContactArrayOutputWithContext added in v5.29.0

func (i CertificateContactsContactArray) ToCertificateContactsContactArrayOutputWithContext(ctx context.Context) CertificateContactsContactArrayOutput

type CertificateContactsContactArrayInput added in v5.29.0

type CertificateContactsContactArrayInput interface {
	pulumi.Input

	ToCertificateContactsContactArrayOutput() CertificateContactsContactArrayOutput
	ToCertificateContactsContactArrayOutputWithContext(context.Context) CertificateContactsContactArrayOutput
}

CertificateContactsContactArrayInput is an input type that accepts CertificateContactsContactArray and CertificateContactsContactArrayOutput values. You can construct a concrete instance of `CertificateContactsContactArrayInput` via:

CertificateContactsContactArray{ CertificateContactsContactArgs{...} }

type CertificateContactsContactArrayOutput added in v5.29.0

type CertificateContactsContactArrayOutput struct{ *pulumi.OutputState }

func (CertificateContactsContactArrayOutput) ElementType added in v5.29.0

func (CertificateContactsContactArrayOutput) Index added in v5.29.0

func (CertificateContactsContactArrayOutput) ToCertificateContactsContactArrayOutput added in v5.29.0

func (o CertificateContactsContactArrayOutput) ToCertificateContactsContactArrayOutput() CertificateContactsContactArrayOutput

func (CertificateContactsContactArrayOutput) ToCertificateContactsContactArrayOutputWithContext added in v5.29.0

func (o CertificateContactsContactArrayOutput) ToCertificateContactsContactArrayOutputWithContext(ctx context.Context) CertificateContactsContactArrayOutput

type CertificateContactsContactInput added in v5.29.0

type CertificateContactsContactInput interface {
	pulumi.Input

	ToCertificateContactsContactOutput() CertificateContactsContactOutput
	ToCertificateContactsContactOutputWithContext(context.Context) CertificateContactsContactOutput
}

CertificateContactsContactInput is an input type that accepts CertificateContactsContactArgs and CertificateContactsContactOutput values. You can construct a concrete instance of `CertificateContactsContactInput` via:

CertificateContactsContactArgs{...}

type CertificateContactsContactOutput added in v5.29.0

type CertificateContactsContactOutput struct{ *pulumi.OutputState }

func (CertificateContactsContactOutput) ElementType added in v5.29.0

func (CertificateContactsContactOutput) Email added in v5.29.0

E-mail address of the contact.

func (CertificateContactsContactOutput) Name added in v5.29.0

Name of the contact.

func (CertificateContactsContactOutput) Phone added in v5.29.0

Phone number of the contact.

func (CertificateContactsContactOutput) ToCertificateContactsContactOutput added in v5.29.0

func (o CertificateContactsContactOutput) ToCertificateContactsContactOutput() CertificateContactsContactOutput

func (CertificateContactsContactOutput) ToCertificateContactsContactOutputWithContext added in v5.29.0

func (o CertificateContactsContactOutput) ToCertificateContactsContactOutputWithContext(ctx context.Context) CertificateContactsContactOutput

type CertificateContactsInput added in v5.29.0

type CertificateContactsInput interface {
	pulumi.Input

	ToCertificateContactsOutput() CertificateContactsOutput
	ToCertificateContactsOutputWithContext(ctx context.Context) CertificateContactsOutput
}

type CertificateContactsMap added in v5.29.0

type CertificateContactsMap map[string]CertificateContactsInput

func (CertificateContactsMap) ElementType added in v5.29.0

func (CertificateContactsMap) ElementType() reflect.Type

func (CertificateContactsMap) ToCertificateContactsMapOutput added in v5.29.0

func (i CertificateContactsMap) ToCertificateContactsMapOutput() CertificateContactsMapOutput

func (CertificateContactsMap) ToCertificateContactsMapOutputWithContext added in v5.29.0

func (i CertificateContactsMap) ToCertificateContactsMapOutputWithContext(ctx context.Context) CertificateContactsMapOutput

type CertificateContactsMapInput added in v5.29.0

type CertificateContactsMapInput interface {
	pulumi.Input

	ToCertificateContactsMapOutput() CertificateContactsMapOutput
	ToCertificateContactsMapOutputWithContext(context.Context) CertificateContactsMapOutput
}

CertificateContactsMapInput is an input type that accepts CertificateContactsMap and CertificateContactsMapOutput values. You can construct a concrete instance of `CertificateContactsMapInput` via:

CertificateContactsMap{ "key": CertificateContactsArgs{...} }

type CertificateContactsMapOutput added in v5.29.0

type CertificateContactsMapOutput struct{ *pulumi.OutputState }

func (CertificateContactsMapOutput) ElementType added in v5.29.0

func (CertificateContactsMapOutput) MapIndex added in v5.29.0

func (CertificateContactsMapOutput) ToCertificateContactsMapOutput added in v5.29.0

func (o CertificateContactsMapOutput) ToCertificateContactsMapOutput() CertificateContactsMapOutput

func (CertificateContactsMapOutput) ToCertificateContactsMapOutputWithContext added in v5.29.0

func (o CertificateContactsMapOutput) ToCertificateContactsMapOutputWithContext(ctx context.Context) CertificateContactsMapOutput

type CertificateContactsOutput added in v5.29.0

type CertificateContactsOutput struct{ *pulumi.OutputState }

func (CertificateContactsOutput) Contacts added in v5.29.0

One or more `contact` blocks as defined below. -->

func (CertificateContactsOutput) ElementType added in v5.29.0

func (CertificateContactsOutput) ElementType() reflect.Type

func (CertificateContactsOutput) KeyVaultId added in v5.29.0

The ID of the Key Vault. Changing this forces a new resource to be created.

func (CertificateContactsOutput) ToCertificateContactsOutput added in v5.29.0

func (o CertificateContactsOutput) ToCertificateContactsOutput() CertificateContactsOutput

func (CertificateContactsOutput) ToCertificateContactsOutputWithContext added in v5.29.0

func (o CertificateContactsOutput) ToCertificateContactsOutputWithContext(ctx context.Context) CertificateContactsOutput

type CertificateContactsState added in v5.29.0

type CertificateContactsState struct {
	// One or more `contact` blocks as defined below.
	// -->
	Contacts CertificateContactsContactArrayInput
	// The ID of the Key Vault. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
}

func (CertificateContactsState) ElementType added in v5.29.0

func (CertificateContactsState) ElementType() reflect.Type

type CertificateInput

type CertificateInput interface {
	pulumi.Input

	ToCertificateOutput() CertificateOutput
	ToCertificateOutputWithContext(ctx context.Context) CertificateOutput
}

type CertificateIssuer

type CertificateIssuer struct {
	pulumi.CustomResourceState

	// The account number with the third-party Certificate Issuer.
	AccountId pulumi.StringPtrOutput `pulumi:"accountId"`
	// One or more `admin` blocks as defined below.
	Admins CertificateIssuerAdminArrayOutput `pulumi:"admins"`
	// The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the organization as provided to the issuer.
	OrgId pulumi.StringPtrOutput `pulumi:"orgId"`
	// The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
	Password pulumi.StringPtrOutput `pulumi:"password"`
	// The name of the third-party Certificate Issuer. Possible values are: `DigiCert`, `GlobalSign`, `OneCertV2-PrivateCA`, `OneCertV2-PublicCA` and `SslAdminV2`.
	ProviderName pulumi.StringOutput `pulumi:"providerName"`
}

Manages a Key Vault Certificate Issuer.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("examplekeyvault"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			SkuName:           pulumi.String("standard"),
			TenantId:          pulumi.String(current.TenantId),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewCertificateIssuer(ctx, "example", &keyvault.CertificateIssuerArgs{
			Name:         pulumi.String("example-issuer"),
			OrgId:        pulumi.String("ExampleOrgName"),
			KeyVaultId:   exampleKeyVault.ID(),
			ProviderName: pulumi.String("DigiCert"),
			AccountId:    pulumi.String("0000"),
			Password:     pulumi.String("example-password"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Certificate Issuers can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/certificateIssuer:CertificateIssuer example "https://key-vault-name.vault.azure.net/certificates/issuers/example" ```

func GetCertificateIssuer

func GetCertificateIssuer(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *CertificateIssuerState, opts ...pulumi.ResourceOption) (*CertificateIssuer, error)

GetCertificateIssuer gets an existing CertificateIssuer resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewCertificateIssuer

func NewCertificateIssuer(ctx *pulumi.Context,
	name string, args *CertificateIssuerArgs, opts ...pulumi.ResourceOption) (*CertificateIssuer, error)

NewCertificateIssuer registers a new resource with the given unique name, arguments, and options.

func (*CertificateIssuer) ElementType

func (*CertificateIssuer) ElementType() reflect.Type

func (*CertificateIssuer) ToCertificateIssuerOutput

func (i *CertificateIssuer) ToCertificateIssuerOutput() CertificateIssuerOutput

func (*CertificateIssuer) ToCertificateIssuerOutputWithContext

func (i *CertificateIssuer) ToCertificateIssuerOutputWithContext(ctx context.Context) CertificateIssuerOutput

type CertificateIssuerAdmin

type CertificateIssuerAdmin struct {
	// E-mail address of the admin.
	EmailAddress string `pulumi:"emailAddress"`
	// First name of the admin.
	FirstName *string `pulumi:"firstName"`
	// Last name of the admin.
	LastName *string `pulumi:"lastName"`
	// Phone number of the admin.
	Phone *string `pulumi:"phone"`
}

type CertificateIssuerAdminArgs

type CertificateIssuerAdminArgs struct {
	// E-mail address of the admin.
	EmailAddress pulumi.StringInput `pulumi:"emailAddress"`
	// First name of the admin.
	FirstName pulumi.StringPtrInput `pulumi:"firstName"`
	// Last name of the admin.
	LastName pulumi.StringPtrInput `pulumi:"lastName"`
	// Phone number of the admin.
	Phone pulumi.StringPtrInput `pulumi:"phone"`
}

func (CertificateIssuerAdminArgs) ElementType

func (CertificateIssuerAdminArgs) ElementType() reflect.Type

func (CertificateIssuerAdminArgs) ToCertificateIssuerAdminOutput

func (i CertificateIssuerAdminArgs) ToCertificateIssuerAdminOutput() CertificateIssuerAdminOutput

func (CertificateIssuerAdminArgs) ToCertificateIssuerAdminOutputWithContext

func (i CertificateIssuerAdminArgs) ToCertificateIssuerAdminOutputWithContext(ctx context.Context) CertificateIssuerAdminOutput

type CertificateIssuerAdminArray

type CertificateIssuerAdminArray []CertificateIssuerAdminInput

func (CertificateIssuerAdminArray) ElementType

func (CertificateIssuerAdminArray) ToCertificateIssuerAdminArrayOutput

func (i CertificateIssuerAdminArray) ToCertificateIssuerAdminArrayOutput() CertificateIssuerAdminArrayOutput

func (CertificateIssuerAdminArray) ToCertificateIssuerAdminArrayOutputWithContext

func (i CertificateIssuerAdminArray) ToCertificateIssuerAdminArrayOutputWithContext(ctx context.Context) CertificateIssuerAdminArrayOutput

type CertificateIssuerAdminArrayInput

type CertificateIssuerAdminArrayInput interface {
	pulumi.Input

	ToCertificateIssuerAdminArrayOutput() CertificateIssuerAdminArrayOutput
	ToCertificateIssuerAdminArrayOutputWithContext(context.Context) CertificateIssuerAdminArrayOutput
}

CertificateIssuerAdminArrayInput is an input type that accepts CertificateIssuerAdminArray and CertificateIssuerAdminArrayOutput values. You can construct a concrete instance of `CertificateIssuerAdminArrayInput` via:

CertificateIssuerAdminArray{ CertificateIssuerAdminArgs{...} }

type CertificateIssuerAdminArrayOutput

type CertificateIssuerAdminArrayOutput struct{ *pulumi.OutputState }

func (CertificateIssuerAdminArrayOutput) ElementType

func (CertificateIssuerAdminArrayOutput) Index

func (CertificateIssuerAdminArrayOutput) ToCertificateIssuerAdminArrayOutput

func (o CertificateIssuerAdminArrayOutput) ToCertificateIssuerAdminArrayOutput() CertificateIssuerAdminArrayOutput

func (CertificateIssuerAdminArrayOutput) ToCertificateIssuerAdminArrayOutputWithContext

func (o CertificateIssuerAdminArrayOutput) ToCertificateIssuerAdminArrayOutputWithContext(ctx context.Context) CertificateIssuerAdminArrayOutput

type CertificateIssuerAdminInput

type CertificateIssuerAdminInput interface {
	pulumi.Input

	ToCertificateIssuerAdminOutput() CertificateIssuerAdminOutput
	ToCertificateIssuerAdminOutputWithContext(context.Context) CertificateIssuerAdminOutput
}

CertificateIssuerAdminInput is an input type that accepts CertificateIssuerAdminArgs and CertificateIssuerAdminOutput values. You can construct a concrete instance of `CertificateIssuerAdminInput` via:

CertificateIssuerAdminArgs{...}

type CertificateIssuerAdminOutput

type CertificateIssuerAdminOutput struct{ *pulumi.OutputState }

func (CertificateIssuerAdminOutput) ElementType

func (CertificateIssuerAdminOutput) EmailAddress

E-mail address of the admin.

func (CertificateIssuerAdminOutput) FirstName

First name of the admin.

func (CertificateIssuerAdminOutput) LastName

Last name of the admin.

func (CertificateIssuerAdminOutput) Phone

Phone number of the admin.

func (CertificateIssuerAdminOutput) ToCertificateIssuerAdminOutput

func (o CertificateIssuerAdminOutput) ToCertificateIssuerAdminOutput() CertificateIssuerAdminOutput

func (CertificateIssuerAdminOutput) ToCertificateIssuerAdminOutputWithContext

func (o CertificateIssuerAdminOutput) ToCertificateIssuerAdminOutputWithContext(ctx context.Context) CertificateIssuerAdminOutput

type CertificateIssuerArgs

type CertificateIssuerArgs struct {
	// The account number with the third-party Certificate Issuer.
	AccountId pulumi.StringPtrInput
	// One or more `admin` blocks as defined below.
	Admins CertificateIssuerAdminArrayInput
	// The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
	Name pulumi.StringPtrInput
	// The ID of the organization as provided to the issuer.
	OrgId pulumi.StringPtrInput
	// The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
	Password pulumi.StringPtrInput
	// The name of the third-party Certificate Issuer. Possible values are: `DigiCert`, `GlobalSign`, `OneCertV2-PrivateCA`, `OneCertV2-PublicCA` and `SslAdminV2`.
	ProviderName pulumi.StringInput
}

The set of arguments for constructing a CertificateIssuer resource.

func (CertificateIssuerArgs) ElementType

func (CertificateIssuerArgs) ElementType() reflect.Type

type CertificateIssuerArray

type CertificateIssuerArray []CertificateIssuerInput

func (CertificateIssuerArray) ElementType

func (CertificateIssuerArray) ElementType() reflect.Type

func (CertificateIssuerArray) ToCertificateIssuerArrayOutput

func (i CertificateIssuerArray) ToCertificateIssuerArrayOutput() CertificateIssuerArrayOutput

func (CertificateIssuerArray) ToCertificateIssuerArrayOutputWithContext

func (i CertificateIssuerArray) ToCertificateIssuerArrayOutputWithContext(ctx context.Context) CertificateIssuerArrayOutput

type CertificateIssuerArrayInput

type CertificateIssuerArrayInput interface {
	pulumi.Input

	ToCertificateIssuerArrayOutput() CertificateIssuerArrayOutput
	ToCertificateIssuerArrayOutputWithContext(context.Context) CertificateIssuerArrayOutput
}

CertificateIssuerArrayInput is an input type that accepts CertificateIssuerArray and CertificateIssuerArrayOutput values. You can construct a concrete instance of `CertificateIssuerArrayInput` via:

CertificateIssuerArray{ CertificateIssuerArgs{...} }

type CertificateIssuerArrayOutput

type CertificateIssuerArrayOutput struct{ *pulumi.OutputState }

func (CertificateIssuerArrayOutput) ElementType

func (CertificateIssuerArrayOutput) Index

func (CertificateIssuerArrayOutput) ToCertificateIssuerArrayOutput

func (o CertificateIssuerArrayOutput) ToCertificateIssuerArrayOutput() CertificateIssuerArrayOutput

func (CertificateIssuerArrayOutput) ToCertificateIssuerArrayOutputWithContext

func (o CertificateIssuerArrayOutput) ToCertificateIssuerArrayOutputWithContext(ctx context.Context) CertificateIssuerArrayOutput

type CertificateIssuerInput

type CertificateIssuerInput interface {
	pulumi.Input

	ToCertificateIssuerOutput() CertificateIssuerOutput
	ToCertificateIssuerOutputWithContext(ctx context.Context) CertificateIssuerOutput
}

type CertificateIssuerMap

type CertificateIssuerMap map[string]CertificateIssuerInput

func (CertificateIssuerMap) ElementType

func (CertificateIssuerMap) ElementType() reflect.Type

func (CertificateIssuerMap) ToCertificateIssuerMapOutput

func (i CertificateIssuerMap) ToCertificateIssuerMapOutput() CertificateIssuerMapOutput

func (CertificateIssuerMap) ToCertificateIssuerMapOutputWithContext

func (i CertificateIssuerMap) ToCertificateIssuerMapOutputWithContext(ctx context.Context) CertificateIssuerMapOutput

type CertificateIssuerMapInput

type CertificateIssuerMapInput interface {
	pulumi.Input

	ToCertificateIssuerMapOutput() CertificateIssuerMapOutput
	ToCertificateIssuerMapOutputWithContext(context.Context) CertificateIssuerMapOutput
}

CertificateIssuerMapInput is an input type that accepts CertificateIssuerMap and CertificateIssuerMapOutput values. You can construct a concrete instance of `CertificateIssuerMapInput` via:

CertificateIssuerMap{ "key": CertificateIssuerArgs{...} }

type CertificateIssuerMapOutput

type CertificateIssuerMapOutput struct{ *pulumi.OutputState }

func (CertificateIssuerMapOutput) ElementType

func (CertificateIssuerMapOutput) ElementType() reflect.Type

func (CertificateIssuerMapOutput) MapIndex

func (CertificateIssuerMapOutput) ToCertificateIssuerMapOutput

func (o CertificateIssuerMapOutput) ToCertificateIssuerMapOutput() CertificateIssuerMapOutput

func (CertificateIssuerMapOutput) ToCertificateIssuerMapOutputWithContext

func (o CertificateIssuerMapOutput) ToCertificateIssuerMapOutputWithContext(ctx context.Context) CertificateIssuerMapOutput

type CertificateIssuerOutput

type CertificateIssuerOutput struct{ *pulumi.OutputState }

func (CertificateIssuerOutput) AccountId added in v5.5.0

The account number with the third-party Certificate Issuer.

func (CertificateIssuerOutput) Admins added in v5.5.0

One or more `admin` blocks as defined below.

func (CertificateIssuerOutput) ElementType

func (CertificateIssuerOutput) ElementType() reflect.Type

func (CertificateIssuerOutput) KeyVaultId added in v5.5.0

The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.

func (CertificateIssuerOutput) Name added in v5.5.0

The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.

func (CertificateIssuerOutput) OrgId added in v5.5.0

The ID of the organization as provided to the issuer.

func (CertificateIssuerOutput) Password added in v5.5.0

The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.

func (CertificateIssuerOutput) ProviderName added in v5.5.0

func (o CertificateIssuerOutput) ProviderName() pulumi.StringOutput

The name of the third-party Certificate Issuer. Possible values are: `DigiCert`, `GlobalSign`, `OneCertV2-PrivateCA`, `OneCertV2-PublicCA` and `SslAdminV2`.

func (CertificateIssuerOutput) ToCertificateIssuerOutput

func (o CertificateIssuerOutput) ToCertificateIssuerOutput() CertificateIssuerOutput

func (CertificateIssuerOutput) ToCertificateIssuerOutputWithContext

func (o CertificateIssuerOutput) ToCertificateIssuerOutputWithContext(ctx context.Context) CertificateIssuerOutput

type CertificateIssuerState

type CertificateIssuerState struct {
	// The account number with the third-party Certificate Issuer.
	AccountId pulumi.StringPtrInput
	// One or more `admin` blocks as defined below.
	Admins CertificateIssuerAdminArrayInput
	// The ID of the Key Vault in which to create the Certificate Issuer. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The name which should be used for this Key Vault Certificate Issuer. Changing this forces a new Key Vault Certificate Issuer to be created.
	Name pulumi.StringPtrInput
	// The ID of the organization as provided to the issuer.
	OrgId pulumi.StringPtrInput
	// The password associated with the account and organization ID at the third-party Certificate Issuer. If not specified, will not overwrite any previous value.
	Password pulumi.StringPtrInput
	// The name of the third-party Certificate Issuer. Possible values are: `DigiCert`, `GlobalSign`, `OneCertV2-PrivateCA`, `OneCertV2-PublicCA` and `SslAdminV2`.
	ProviderName pulumi.StringPtrInput
}

func (CertificateIssuerState) ElementType

func (CertificateIssuerState) ElementType() reflect.Type

type CertificateMap

type CertificateMap map[string]CertificateInput

func (CertificateMap) ElementType

func (CertificateMap) ElementType() reflect.Type

func (CertificateMap) ToCertificateMapOutput

func (i CertificateMap) ToCertificateMapOutput() CertificateMapOutput

func (CertificateMap) ToCertificateMapOutputWithContext

func (i CertificateMap) ToCertificateMapOutputWithContext(ctx context.Context) CertificateMapOutput

type CertificateMapInput

type CertificateMapInput interface {
	pulumi.Input

	ToCertificateMapOutput() CertificateMapOutput
	ToCertificateMapOutputWithContext(context.Context) CertificateMapOutput
}

CertificateMapInput is an input type that accepts CertificateMap and CertificateMapOutput values. You can construct a concrete instance of `CertificateMapInput` via:

CertificateMap{ "key": CertificateArgs{...} }

type CertificateMapOutput

type CertificateMapOutput struct{ *pulumi.OutputState }

func (CertificateMapOutput) ElementType

func (CertificateMapOutput) ElementType() reflect.Type

func (CertificateMapOutput) MapIndex

func (CertificateMapOutput) ToCertificateMapOutput

func (o CertificateMapOutput) ToCertificateMapOutput() CertificateMapOutput

func (CertificateMapOutput) ToCertificateMapOutputWithContext

func (o CertificateMapOutput) ToCertificateMapOutputWithContext(ctx context.Context) CertificateMapOutput

type CertificateOutput

type CertificateOutput struct{ *pulumi.OutputState }

func (CertificateOutput) Certificate added in v5.5.0

A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.

func (CertificateOutput) CertificateAttributes added in v5.5.0

A `certificateAttribute` block as defined below.

func (CertificateOutput) CertificateData added in v5.5.0

func (o CertificateOutput) CertificateData() pulumi.StringOutput

The raw Key Vault Certificate data represented as a hexadecimal string.

func (CertificateOutput) CertificateDataBase64 added in v5.5.0

func (o CertificateOutput) CertificateDataBase64() pulumi.StringOutput

The Base64 encoded Key Vault Certificate data.

func (CertificateOutput) CertificatePolicy added in v5.5.0

A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.

> **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.

func (CertificateOutput) ElementType

func (CertificateOutput) ElementType() reflect.Type

func (CertificateOutput) KeyVaultId added in v5.5.0

func (o CertificateOutput) KeyVaultId() pulumi.StringOutput

The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.

func (CertificateOutput) Name added in v5.5.0

Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.

func (CertificateOutput) ResourceManagerId added in v5.41.0

func (o CertificateOutput) ResourceManagerId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.

func (CertificateOutput) ResourceManagerVersionlessId added in v5.41.0

func (o CertificateOutput) ResourceManagerVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.

func (CertificateOutput) SecretId added in v5.5.0

func (o CertificateOutput) SecretId() pulumi.StringOutput

The ID of the associated Key Vault Secret.

func (CertificateOutput) Tags added in v5.5.0

A mapping of tags to assign to the resource.

func (CertificateOutput) Thumbprint added in v5.5.0

func (o CertificateOutput) Thumbprint() pulumi.StringOutput

The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.

func (CertificateOutput) ToCertificateOutput

func (o CertificateOutput) ToCertificateOutput() CertificateOutput

func (CertificateOutput) ToCertificateOutputWithContext

func (o CertificateOutput) ToCertificateOutputWithContext(ctx context.Context) CertificateOutput

func (CertificateOutput) Version added in v5.5.0

The current version of the Key Vault Certificate.

func (CertificateOutput) VersionlessId added in v5.5.0

func (o CertificateOutput) VersionlessId() pulumi.StringOutput

The Base ID of the Key Vault Certificate.

func (CertificateOutput) VersionlessSecretId added in v5.5.0

func (o CertificateOutput) VersionlessSecretId() pulumi.StringOutput

The Base ID of the Key Vault Secret.

type CertificateState

type CertificateState struct {
	// A `certificate` block as defined below, used to Import an existing certificate. Changing this will create a new version of the Key Vault Certificate.
	Certificate CertificateCertificatePtrInput
	// A `certificateAttribute` block as defined below.
	CertificateAttributes CertificateCertificateAttributeArrayInput
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringPtrInput
	// The Base64 encoded Key Vault Certificate data.
	CertificateDataBase64 pulumi.StringPtrInput
	// A `certificatePolicy` block as defined below. Changing this (except the `lifetimeAction` field) will create a new version of the Key Vault Certificate.
	//
	// > **NOTE:** When creating a Key Vault Certificate, at least one of `certificate` or `certificatePolicy` is required. Provide `certificate` to import an existing certificate, `certificatePolicy` to generate a new certificate.
	CertificatePolicy CertificateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceManagerId pulumi.StringPtrInput
	// The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
	ResourceManagerVersionlessId pulumi.StringPtrInput
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringPtrInput
	// The current version of the Key Vault Certificate.
	Version pulumi.StringPtrInput
	// The Base ID of the Key Vault Certificate.
	VersionlessId pulumi.StringPtrInput
	// The Base ID of the Key Vault Secret.
	VersionlessSecretId pulumi.StringPtrInput
}

func (CertificateState) ElementType

func (CertificateState) ElementType() reflect.Type

type GetCertificateCertificatePolicy

type GetCertificateCertificatePolicy struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters []GetCertificateCertificatePolicyIssuerParameter `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties []GetCertificateCertificatePolicyKeyProperty `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions []GetCertificateCertificatePolicyLifetimeAction `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties []GetCertificateCertificatePolicySecretProperty `pulumi:"secretProperties"`
	// An `x509CertificateProperties` block as defined below.
	X509CertificateProperties []GetCertificateCertificatePolicyX509CertificateProperty `pulumi:"x509CertificateProperties"`
}

type GetCertificateCertificatePolicyArgs

type GetCertificateCertificatePolicyArgs struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters GetCertificateCertificatePolicyIssuerParameterArrayInput `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties GetCertificateCertificatePolicyKeyPropertyArrayInput `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions GetCertificateCertificatePolicyLifetimeActionArrayInput `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties GetCertificateCertificatePolicySecretPropertyArrayInput `pulumi:"secretProperties"`
	// An `x509CertificateProperties` block as defined below.
	X509CertificateProperties GetCertificateCertificatePolicyX509CertificatePropertyArrayInput `pulumi:"x509CertificateProperties"`
}

func (GetCertificateCertificatePolicyArgs) ElementType

func (GetCertificateCertificatePolicyArgs) ToGetCertificateCertificatePolicyOutput

func (i GetCertificateCertificatePolicyArgs) ToGetCertificateCertificatePolicyOutput() GetCertificateCertificatePolicyOutput

func (GetCertificateCertificatePolicyArgs) ToGetCertificateCertificatePolicyOutputWithContext

func (i GetCertificateCertificatePolicyArgs) ToGetCertificateCertificatePolicyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyOutput

type GetCertificateCertificatePolicyArray

type GetCertificateCertificatePolicyArray []GetCertificateCertificatePolicyInput

func (GetCertificateCertificatePolicyArray) ElementType

func (GetCertificateCertificatePolicyArray) ToGetCertificateCertificatePolicyArrayOutput

func (i GetCertificateCertificatePolicyArray) ToGetCertificateCertificatePolicyArrayOutput() GetCertificateCertificatePolicyArrayOutput

func (GetCertificateCertificatePolicyArray) ToGetCertificateCertificatePolicyArrayOutputWithContext

func (i GetCertificateCertificatePolicyArray) ToGetCertificateCertificatePolicyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyArrayOutput

type GetCertificateCertificatePolicyArrayInput

type GetCertificateCertificatePolicyArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyArrayOutput() GetCertificateCertificatePolicyArrayOutput
	ToGetCertificateCertificatePolicyArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyArrayOutput
}

GetCertificateCertificatePolicyArrayInput is an input type that accepts GetCertificateCertificatePolicyArray and GetCertificateCertificatePolicyArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyArrayInput` via:

GetCertificateCertificatePolicyArray{ GetCertificateCertificatePolicyArgs{...} }

type GetCertificateCertificatePolicyArrayOutput

type GetCertificateCertificatePolicyArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyArrayOutput) ElementType

func (GetCertificateCertificatePolicyArrayOutput) Index

func (GetCertificateCertificatePolicyArrayOutput) ToGetCertificateCertificatePolicyArrayOutput

func (o GetCertificateCertificatePolicyArrayOutput) ToGetCertificateCertificatePolicyArrayOutput() GetCertificateCertificatePolicyArrayOutput

func (GetCertificateCertificatePolicyArrayOutput) ToGetCertificateCertificatePolicyArrayOutputWithContext

func (o GetCertificateCertificatePolicyArrayOutput) ToGetCertificateCertificatePolicyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyArrayOutput

type GetCertificateCertificatePolicyInput

type GetCertificateCertificatePolicyInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyOutput() GetCertificateCertificatePolicyOutput
	ToGetCertificateCertificatePolicyOutputWithContext(context.Context) GetCertificateCertificatePolicyOutput
}

GetCertificateCertificatePolicyInput is an input type that accepts GetCertificateCertificatePolicyArgs and GetCertificateCertificatePolicyOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyInput` via:

GetCertificateCertificatePolicyArgs{...}

type GetCertificateCertificatePolicyIssuerParameter

type GetCertificateCertificatePolicyIssuerParameter struct {
	// Specifies the name of the Key Vault Certificate.
	Name string `pulumi:"name"`
}

type GetCertificateCertificatePolicyIssuerParameterArgs

type GetCertificateCertificatePolicyIssuerParameterArgs struct {
	// Specifies the name of the Key Vault Certificate.
	Name pulumi.StringInput `pulumi:"name"`
}

func (GetCertificateCertificatePolicyIssuerParameterArgs) ElementType

func (GetCertificateCertificatePolicyIssuerParameterArgs) ToGetCertificateCertificatePolicyIssuerParameterOutput

func (i GetCertificateCertificatePolicyIssuerParameterArgs) ToGetCertificateCertificatePolicyIssuerParameterOutput() GetCertificateCertificatePolicyIssuerParameterOutput

func (GetCertificateCertificatePolicyIssuerParameterArgs) ToGetCertificateCertificatePolicyIssuerParameterOutputWithContext

func (i GetCertificateCertificatePolicyIssuerParameterArgs) ToGetCertificateCertificatePolicyIssuerParameterOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyIssuerParameterOutput

type GetCertificateCertificatePolicyIssuerParameterArray

type GetCertificateCertificatePolicyIssuerParameterArray []GetCertificateCertificatePolicyIssuerParameterInput

func (GetCertificateCertificatePolicyIssuerParameterArray) ElementType

func (GetCertificateCertificatePolicyIssuerParameterArray) ToGetCertificateCertificatePolicyIssuerParameterArrayOutput

func (i GetCertificateCertificatePolicyIssuerParameterArray) ToGetCertificateCertificatePolicyIssuerParameterArrayOutput() GetCertificateCertificatePolicyIssuerParameterArrayOutput

func (GetCertificateCertificatePolicyIssuerParameterArray) ToGetCertificateCertificatePolicyIssuerParameterArrayOutputWithContext

func (i GetCertificateCertificatePolicyIssuerParameterArray) ToGetCertificateCertificatePolicyIssuerParameterArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyIssuerParameterArrayOutput

type GetCertificateCertificatePolicyIssuerParameterArrayInput

type GetCertificateCertificatePolicyIssuerParameterArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyIssuerParameterArrayOutput() GetCertificateCertificatePolicyIssuerParameterArrayOutput
	ToGetCertificateCertificatePolicyIssuerParameterArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyIssuerParameterArrayOutput
}

GetCertificateCertificatePolicyIssuerParameterArrayInput is an input type that accepts GetCertificateCertificatePolicyIssuerParameterArray and GetCertificateCertificatePolicyIssuerParameterArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyIssuerParameterArrayInput` via:

GetCertificateCertificatePolicyIssuerParameterArray{ GetCertificateCertificatePolicyIssuerParameterArgs{...} }

type GetCertificateCertificatePolicyIssuerParameterArrayOutput

type GetCertificateCertificatePolicyIssuerParameterArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyIssuerParameterArrayOutput) ElementType

func (GetCertificateCertificatePolicyIssuerParameterArrayOutput) Index

func (GetCertificateCertificatePolicyIssuerParameterArrayOutput) ToGetCertificateCertificatePolicyIssuerParameterArrayOutput

func (GetCertificateCertificatePolicyIssuerParameterArrayOutput) ToGetCertificateCertificatePolicyIssuerParameterArrayOutputWithContext

func (o GetCertificateCertificatePolicyIssuerParameterArrayOutput) ToGetCertificateCertificatePolicyIssuerParameterArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyIssuerParameterArrayOutput

type GetCertificateCertificatePolicyIssuerParameterInput

type GetCertificateCertificatePolicyIssuerParameterInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyIssuerParameterOutput() GetCertificateCertificatePolicyIssuerParameterOutput
	ToGetCertificateCertificatePolicyIssuerParameterOutputWithContext(context.Context) GetCertificateCertificatePolicyIssuerParameterOutput
}

GetCertificateCertificatePolicyIssuerParameterInput is an input type that accepts GetCertificateCertificatePolicyIssuerParameterArgs and GetCertificateCertificatePolicyIssuerParameterOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyIssuerParameterInput` via:

GetCertificateCertificatePolicyIssuerParameterArgs{...}

type GetCertificateCertificatePolicyIssuerParameterOutput

type GetCertificateCertificatePolicyIssuerParameterOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyIssuerParameterOutput) ElementType

func (GetCertificateCertificatePolicyIssuerParameterOutput) Name

Specifies the name of the Key Vault Certificate.

func (GetCertificateCertificatePolicyIssuerParameterOutput) ToGetCertificateCertificatePolicyIssuerParameterOutput

func (GetCertificateCertificatePolicyIssuerParameterOutput) ToGetCertificateCertificatePolicyIssuerParameterOutputWithContext

func (o GetCertificateCertificatePolicyIssuerParameterOutput) ToGetCertificateCertificatePolicyIssuerParameterOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyIssuerParameterOutput

type GetCertificateCertificatePolicyKeyProperty

type GetCertificateCertificatePolicyKeyProperty struct {
	Curve string `pulumi:"curve"`
	// Is this Certificate Exportable?
	Exportable bool `pulumi:"exportable"`
	// The size of the Key used in the Certificate.
	KeySize int `pulumi:"keySize"`
	// Specifies the Type of Key, for example `RSA`.
	KeyType string `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey bool `pulumi:"reuseKey"`
}

type GetCertificateCertificatePolicyKeyPropertyArgs

type GetCertificateCertificatePolicyKeyPropertyArgs struct {
	Curve pulumi.StringInput `pulumi:"curve"`
	// Is this Certificate Exportable?
	Exportable pulumi.BoolInput `pulumi:"exportable"`
	// The size of the Key used in the Certificate.
	KeySize pulumi.IntInput `pulumi:"keySize"`
	// Specifies the Type of Key, for example `RSA`.
	KeyType pulumi.StringInput `pulumi:"keyType"`
	// Is the key reusable?
	ReuseKey pulumi.BoolInput `pulumi:"reuseKey"`
}

func (GetCertificateCertificatePolicyKeyPropertyArgs) ElementType

func (GetCertificateCertificatePolicyKeyPropertyArgs) ToGetCertificateCertificatePolicyKeyPropertyOutput

func (i GetCertificateCertificatePolicyKeyPropertyArgs) ToGetCertificateCertificatePolicyKeyPropertyOutput() GetCertificateCertificatePolicyKeyPropertyOutput

func (GetCertificateCertificatePolicyKeyPropertyArgs) ToGetCertificateCertificatePolicyKeyPropertyOutputWithContext

func (i GetCertificateCertificatePolicyKeyPropertyArgs) ToGetCertificateCertificatePolicyKeyPropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyKeyPropertyOutput

type GetCertificateCertificatePolicyKeyPropertyArray

type GetCertificateCertificatePolicyKeyPropertyArray []GetCertificateCertificatePolicyKeyPropertyInput

func (GetCertificateCertificatePolicyKeyPropertyArray) ElementType

func (GetCertificateCertificatePolicyKeyPropertyArray) ToGetCertificateCertificatePolicyKeyPropertyArrayOutput

func (i GetCertificateCertificatePolicyKeyPropertyArray) ToGetCertificateCertificatePolicyKeyPropertyArrayOutput() GetCertificateCertificatePolicyKeyPropertyArrayOutput

func (GetCertificateCertificatePolicyKeyPropertyArray) ToGetCertificateCertificatePolicyKeyPropertyArrayOutputWithContext

func (i GetCertificateCertificatePolicyKeyPropertyArray) ToGetCertificateCertificatePolicyKeyPropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyKeyPropertyArrayOutput

type GetCertificateCertificatePolicyKeyPropertyArrayInput

type GetCertificateCertificatePolicyKeyPropertyArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyKeyPropertyArrayOutput() GetCertificateCertificatePolicyKeyPropertyArrayOutput
	ToGetCertificateCertificatePolicyKeyPropertyArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyKeyPropertyArrayOutput
}

GetCertificateCertificatePolicyKeyPropertyArrayInput is an input type that accepts GetCertificateCertificatePolicyKeyPropertyArray and GetCertificateCertificatePolicyKeyPropertyArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyKeyPropertyArrayInput` via:

GetCertificateCertificatePolicyKeyPropertyArray{ GetCertificateCertificatePolicyKeyPropertyArgs{...} }

type GetCertificateCertificatePolicyKeyPropertyArrayOutput

type GetCertificateCertificatePolicyKeyPropertyArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyKeyPropertyArrayOutput) ElementType

func (GetCertificateCertificatePolicyKeyPropertyArrayOutput) Index

func (GetCertificateCertificatePolicyKeyPropertyArrayOutput) ToGetCertificateCertificatePolicyKeyPropertyArrayOutput

func (GetCertificateCertificatePolicyKeyPropertyArrayOutput) ToGetCertificateCertificatePolicyKeyPropertyArrayOutputWithContext

func (o GetCertificateCertificatePolicyKeyPropertyArrayOutput) ToGetCertificateCertificatePolicyKeyPropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyKeyPropertyArrayOutput

type GetCertificateCertificatePolicyKeyPropertyInput

type GetCertificateCertificatePolicyKeyPropertyInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyKeyPropertyOutput() GetCertificateCertificatePolicyKeyPropertyOutput
	ToGetCertificateCertificatePolicyKeyPropertyOutputWithContext(context.Context) GetCertificateCertificatePolicyKeyPropertyOutput
}

GetCertificateCertificatePolicyKeyPropertyInput is an input type that accepts GetCertificateCertificatePolicyKeyPropertyArgs and GetCertificateCertificatePolicyKeyPropertyOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyKeyPropertyInput` via:

GetCertificateCertificatePolicyKeyPropertyArgs{...}

type GetCertificateCertificatePolicyKeyPropertyOutput

type GetCertificateCertificatePolicyKeyPropertyOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyKeyPropertyOutput) Curve

func (GetCertificateCertificatePolicyKeyPropertyOutput) ElementType

func (GetCertificateCertificatePolicyKeyPropertyOutput) Exportable

Is this Certificate Exportable?

func (GetCertificateCertificatePolicyKeyPropertyOutput) KeySize

The size of the Key used in the Certificate.

func (GetCertificateCertificatePolicyKeyPropertyOutput) KeyType

Specifies the Type of Key, for example `RSA`.

func (GetCertificateCertificatePolicyKeyPropertyOutput) ReuseKey

Is the key reusable?

func (GetCertificateCertificatePolicyKeyPropertyOutput) ToGetCertificateCertificatePolicyKeyPropertyOutput

func (o GetCertificateCertificatePolicyKeyPropertyOutput) ToGetCertificateCertificatePolicyKeyPropertyOutput() GetCertificateCertificatePolicyKeyPropertyOutput

func (GetCertificateCertificatePolicyKeyPropertyOutput) ToGetCertificateCertificatePolicyKeyPropertyOutputWithContext

func (o GetCertificateCertificatePolicyKeyPropertyOutput) ToGetCertificateCertificatePolicyKeyPropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyKeyPropertyOutput

type GetCertificateCertificatePolicyLifetimeAction

type GetCertificateCertificatePolicyLifetimeAction struct {
	// A `action` block as defined below.
	Actions []GetCertificateCertificatePolicyLifetimeActionAction `pulumi:"actions"`
	// A `trigger` block as defined below.
	Triggers []GetCertificateCertificatePolicyLifetimeActionTrigger `pulumi:"triggers"`
}

type GetCertificateCertificatePolicyLifetimeActionAction

type GetCertificateCertificatePolicyLifetimeActionAction struct {
	// The Type of action to be performed when the lifetime trigger is triggerec.
	ActionType string `pulumi:"actionType"`
}

type GetCertificateCertificatePolicyLifetimeActionActionArgs

type GetCertificateCertificatePolicyLifetimeActionActionArgs struct {
	// The Type of action to be performed when the lifetime trigger is triggerec.
	ActionType pulumi.StringInput `pulumi:"actionType"`
}

func (GetCertificateCertificatePolicyLifetimeActionActionArgs) ElementType

func (GetCertificateCertificatePolicyLifetimeActionActionArgs) ToGetCertificateCertificatePolicyLifetimeActionActionOutput

func (GetCertificateCertificatePolicyLifetimeActionActionArgs) ToGetCertificateCertificatePolicyLifetimeActionActionOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionActionArgs) ToGetCertificateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionActionOutput

type GetCertificateCertificatePolicyLifetimeActionActionArray

type GetCertificateCertificatePolicyLifetimeActionActionArray []GetCertificateCertificatePolicyLifetimeActionActionInput

func (GetCertificateCertificatePolicyLifetimeActionActionArray) ElementType

func (GetCertificateCertificatePolicyLifetimeActionActionArray) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutput

func (i GetCertificateCertificatePolicyLifetimeActionActionArray) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutput() GetCertificateCertificatePolicyLifetimeActionActionArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionActionArray) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionActionArray) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionActionArrayInput

type GetCertificateCertificatePolicyLifetimeActionActionArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutput() GetCertificateCertificatePolicyLifetimeActionActionArrayOutput
	ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionActionArrayOutput
}

GetCertificateCertificatePolicyLifetimeActionActionArrayInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionActionArray and GetCertificateCertificatePolicyLifetimeActionActionArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionActionArrayInput` via:

GetCertificateCertificatePolicyLifetimeActionActionArray{ GetCertificateCertificatePolicyLifetimeActionActionArgs{...} }

type GetCertificateCertificatePolicyLifetimeActionActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionActionArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionActionArrayOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionActionArrayOutput) Index

func (GetCertificateCertificatePolicyLifetimeActionActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionActionArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionActionInput

type GetCertificateCertificatePolicyLifetimeActionActionInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionActionOutput() GetCertificateCertificatePolicyLifetimeActionActionOutput
	ToGetCertificateCertificatePolicyLifetimeActionActionOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionActionOutput
}

GetCertificateCertificatePolicyLifetimeActionActionInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionActionArgs and GetCertificateCertificatePolicyLifetimeActionActionOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionActionInput` via:

GetCertificateCertificatePolicyLifetimeActionActionArgs{...}

type GetCertificateCertificatePolicyLifetimeActionActionOutput

type GetCertificateCertificatePolicyLifetimeActionActionOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionActionOutput) ActionType

The Type of action to be performed when the lifetime trigger is triggerec.

func (GetCertificateCertificatePolicyLifetimeActionActionOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionActionOutput) ToGetCertificateCertificatePolicyLifetimeActionActionOutput

func (GetCertificateCertificatePolicyLifetimeActionActionOutput) ToGetCertificateCertificatePolicyLifetimeActionActionOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionActionOutput) ToGetCertificateCertificatePolicyLifetimeActionActionOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionActionOutput

type GetCertificateCertificatePolicyLifetimeActionArgs

type GetCertificateCertificatePolicyLifetimeActionArgs struct {
	// A `action` block as defined below.
	Actions GetCertificateCertificatePolicyLifetimeActionActionArrayInput `pulumi:"actions"`
	// A `trigger` block as defined below.
	Triggers GetCertificateCertificatePolicyLifetimeActionTriggerArrayInput `pulumi:"triggers"`
}

func (GetCertificateCertificatePolicyLifetimeActionArgs) ElementType

func (GetCertificateCertificatePolicyLifetimeActionArgs) ToGetCertificateCertificatePolicyLifetimeActionOutput

func (i GetCertificateCertificatePolicyLifetimeActionArgs) ToGetCertificateCertificatePolicyLifetimeActionOutput() GetCertificateCertificatePolicyLifetimeActionOutput

func (GetCertificateCertificatePolicyLifetimeActionArgs) ToGetCertificateCertificatePolicyLifetimeActionOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionArgs) ToGetCertificateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionOutput

type GetCertificateCertificatePolicyLifetimeActionArray

type GetCertificateCertificatePolicyLifetimeActionArray []GetCertificateCertificatePolicyLifetimeActionInput

func (GetCertificateCertificatePolicyLifetimeActionArray) ElementType

func (GetCertificateCertificatePolicyLifetimeActionArray) ToGetCertificateCertificatePolicyLifetimeActionArrayOutput

func (i GetCertificateCertificatePolicyLifetimeActionArray) ToGetCertificateCertificatePolicyLifetimeActionArrayOutput() GetCertificateCertificatePolicyLifetimeActionArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionArray) ToGetCertificateCertificatePolicyLifetimeActionArrayOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionArray) ToGetCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionArrayInput

type GetCertificateCertificatePolicyLifetimeActionArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionArrayOutput() GetCertificateCertificatePolicyLifetimeActionArrayOutput
	ToGetCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionArrayOutput
}

GetCertificateCertificatePolicyLifetimeActionArrayInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionArray and GetCertificateCertificatePolicyLifetimeActionArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionArrayInput` via:

GetCertificateCertificatePolicyLifetimeActionArray{ GetCertificateCertificatePolicyLifetimeActionArgs{...} }

type GetCertificateCertificatePolicyLifetimeActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionArrayOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionArrayOutput) Index

func (GetCertificateCertificatePolicyLifetimeActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionArrayOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionArrayOutput

type GetCertificateCertificatePolicyLifetimeActionInput

type GetCertificateCertificatePolicyLifetimeActionInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionOutput() GetCertificateCertificatePolicyLifetimeActionOutput
	ToGetCertificateCertificatePolicyLifetimeActionOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionOutput
}

GetCertificateCertificatePolicyLifetimeActionInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionArgs and GetCertificateCertificatePolicyLifetimeActionOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionInput` via:

GetCertificateCertificatePolicyLifetimeActionArgs{...}

type GetCertificateCertificatePolicyLifetimeActionOutput

type GetCertificateCertificatePolicyLifetimeActionOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionOutput) Actions

A `action` block as defined below.

func (GetCertificateCertificatePolicyLifetimeActionOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionOutput) ToGetCertificateCertificatePolicyLifetimeActionOutput

func (o GetCertificateCertificatePolicyLifetimeActionOutput) ToGetCertificateCertificatePolicyLifetimeActionOutput() GetCertificateCertificatePolicyLifetimeActionOutput

func (GetCertificateCertificatePolicyLifetimeActionOutput) ToGetCertificateCertificatePolicyLifetimeActionOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionOutput) ToGetCertificateCertificatePolicyLifetimeActionOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionOutput

func (GetCertificateCertificatePolicyLifetimeActionOutput) Triggers

A `trigger` block as defined below.

type GetCertificateCertificatePolicyLifetimeActionTrigger

type GetCertificateCertificatePolicyLifetimeActionTrigger struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run.
	DaysBeforeExpiry int `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.
	LifetimePercentage int `pulumi:"lifetimePercentage"`
}

type GetCertificateCertificatePolicyLifetimeActionTriggerArgs

type GetCertificateCertificatePolicyLifetimeActionTriggerArgs struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run.
	DaysBeforeExpiry pulumi.IntInput `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.
	LifetimePercentage pulumi.IntInput `pulumi:"lifetimePercentage"`
}

func (GetCertificateCertificatePolicyLifetimeActionTriggerArgs) ElementType

func (GetCertificateCertificatePolicyLifetimeActionTriggerArgs) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutput

func (GetCertificateCertificatePolicyLifetimeActionTriggerArgs) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionTriggerArgs) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerOutput

type GetCertificateCertificatePolicyLifetimeActionTriggerArray

type GetCertificateCertificatePolicyLifetimeActionTriggerArray []GetCertificateCertificatePolicyLifetimeActionTriggerInput

func (GetCertificateCertificatePolicyLifetimeActionTriggerArray) ElementType

func (GetCertificateCertificatePolicyLifetimeActionTriggerArray) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

func (i GetCertificateCertificatePolicyLifetimeActionTriggerArray) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput() GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionTriggerArray) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutputWithContext

func (i GetCertificateCertificatePolicyLifetimeActionTriggerArray) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

type GetCertificateCertificatePolicyLifetimeActionTriggerArrayInput

type GetCertificateCertificatePolicyLifetimeActionTriggerArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput() GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput
	ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput
}

GetCertificateCertificatePolicyLifetimeActionTriggerArrayInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionTriggerArray and GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionTriggerArrayInput` via:

GetCertificateCertificatePolicyLifetimeActionTriggerArray{ GetCertificateCertificatePolicyLifetimeActionTriggerArgs{...} }

type GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

type GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput) Index

func (GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

func (GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerArrayOutput

type GetCertificateCertificatePolicyLifetimeActionTriggerInput

type GetCertificateCertificatePolicyLifetimeActionTriggerInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyLifetimeActionTriggerOutput() GetCertificateCertificatePolicyLifetimeActionTriggerOutput
	ToGetCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerOutput
}

GetCertificateCertificatePolicyLifetimeActionTriggerInput is an input type that accepts GetCertificateCertificatePolicyLifetimeActionTriggerArgs and GetCertificateCertificatePolicyLifetimeActionTriggerOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyLifetimeActionTriggerInput` via:

GetCertificateCertificatePolicyLifetimeActionTriggerArgs{...}

type GetCertificateCertificatePolicyLifetimeActionTriggerOutput

type GetCertificateCertificatePolicyLifetimeActionTriggerOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyLifetimeActionTriggerOutput) DaysBeforeExpiry

The number of days before the Certificate expires that the action associated with this Trigger should run.

func (GetCertificateCertificatePolicyLifetimeActionTriggerOutput) ElementType

func (GetCertificateCertificatePolicyLifetimeActionTriggerOutput) LifetimePercentage

The percentage at which during the Certificates Lifetime the action associated with this Trigger should run.

func (GetCertificateCertificatePolicyLifetimeActionTriggerOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutput

func (GetCertificateCertificatePolicyLifetimeActionTriggerOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext

func (o GetCertificateCertificatePolicyLifetimeActionTriggerOutput) ToGetCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyLifetimeActionTriggerOutput

type GetCertificateCertificatePolicyOutput

type GetCertificateCertificatePolicyOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyOutput) ElementType

func (GetCertificateCertificatePolicyOutput) IssuerParameters

A `issuerParameters` block as defined below.

func (GetCertificateCertificatePolicyOutput) KeyProperties

A `keyProperties` block as defined below.

func (GetCertificateCertificatePolicyOutput) LifetimeActions

A `lifetimeAction` block as defined below.

func (GetCertificateCertificatePolicyOutput) SecretProperties

A `secretProperties` block as defined below.

func (GetCertificateCertificatePolicyOutput) ToGetCertificateCertificatePolicyOutput

func (o GetCertificateCertificatePolicyOutput) ToGetCertificateCertificatePolicyOutput() GetCertificateCertificatePolicyOutput

func (GetCertificateCertificatePolicyOutput) ToGetCertificateCertificatePolicyOutputWithContext

func (o GetCertificateCertificatePolicyOutput) ToGetCertificateCertificatePolicyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyOutput

func (GetCertificateCertificatePolicyOutput) X509CertificateProperties

An `x509CertificateProperties` block as defined below.

type GetCertificateCertificatePolicySecretProperty

type GetCertificateCertificatePolicySecretProperty struct {
	// The Content-Type of the Certificate, for example `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType string `pulumi:"contentType"`
}

type GetCertificateCertificatePolicySecretPropertyArgs

type GetCertificateCertificatePolicySecretPropertyArgs struct {
	// The Content-Type of the Certificate, for example `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.
	ContentType pulumi.StringInput `pulumi:"contentType"`
}

func (GetCertificateCertificatePolicySecretPropertyArgs) ElementType

func (GetCertificateCertificatePolicySecretPropertyArgs) ToGetCertificateCertificatePolicySecretPropertyOutput

func (i GetCertificateCertificatePolicySecretPropertyArgs) ToGetCertificateCertificatePolicySecretPropertyOutput() GetCertificateCertificatePolicySecretPropertyOutput

func (GetCertificateCertificatePolicySecretPropertyArgs) ToGetCertificateCertificatePolicySecretPropertyOutputWithContext

func (i GetCertificateCertificatePolicySecretPropertyArgs) ToGetCertificateCertificatePolicySecretPropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicySecretPropertyOutput

type GetCertificateCertificatePolicySecretPropertyArray

type GetCertificateCertificatePolicySecretPropertyArray []GetCertificateCertificatePolicySecretPropertyInput

func (GetCertificateCertificatePolicySecretPropertyArray) ElementType

func (GetCertificateCertificatePolicySecretPropertyArray) ToGetCertificateCertificatePolicySecretPropertyArrayOutput

func (i GetCertificateCertificatePolicySecretPropertyArray) ToGetCertificateCertificatePolicySecretPropertyArrayOutput() GetCertificateCertificatePolicySecretPropertyArrayOutput

func (GetCertificateCertificatePolicySecretPropertyArray) ToGetCertificateCertificatePolicySecretPropertyArrayOutputWithContext

func (i GetCertificateCertificatePolicySecretPropertyArray) ToGetCertificateCertificatePolicySecretPropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicySecretPropertyArrayOutput

type GetCertificateCertificatePolicySecretPropertyArrayInput

type GetCertificateCertificatePolicySecretPropertyArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicySecretPropertyArrayOutput() GetCertificateCertificatePolicySecretPropertyArrayOutput
	ToGetCertificateCertificatePolicySecretPropertyArrayOutputWithContext(context.Context) GetCertificateCertificatePolicySecretPropertyArrayOutput
}

GetCertificateCertificatePolicySecretPropertyArrayInput is an input type that accepts GetCertificateCertificatePolicySecretPropertyArray and GetCertificateCertificatePolicySecretPropertyArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicySecretPropertyArrayInput` via:

GetCertificateCertificatePolicySecretPropertyArray{ GetCertificateCertificatePolicySecretPropertyArgs{...} }

type GetCertificateCertificatePolicySecretPropertyArrayOutput

type GetCertificateCertificatePolicySecretPropertyArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicySecretPropertyArrayOutput) ElementType

func (GetCertificateCertificatePolicySecretPropertyArrayOutput) Index

func (GetCertificateCertificatePolicySecretPropertyArrayOutput) ToGetCertificateCertificatePolicySecretPropertyArrayOutput

func (GetCertificateCertificatePolicySecretPropertyArrayOutput) ToGetCertificateCertificatePolicySecretPropertyArrayOutputWithContext

func (o GetCertificateCertificatePolicySecretPropertyArrayOutput) ToGetCertificateCertificatePolicySecretPropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicySecretPropertyArrayOutput

type GetCertificateCertificatePolicySecretPropertyInput

type GetCertificateCertificatePolicySecretPropertyInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicySecretPropertyOutput() GetCertificateCertificatePolicySecretPropertyOutput
	ToGetCertificateCertificatePolicySecretPropertyOutputWithContext(context.Context) GetCertificateCertificatePolicySecretPropertyOutput
}

GetCertificateCertificatePolicySecretPropertyInput is an input type that accepts GetCertificateCertificatePolicySecretPropertyArgs and GetCertificateCertificatePolicySecretPropertyOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicySecretPropertyInput` via:

GetCertificateCertificatePolicySecretPropertyArgs{...}

type GetCertificateCertificatePolicySecretPropertyOutput

type GetCertificateCertificatePolicySecretPropertyOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicySecretPropertyOutput) ContentType

The Content-Type of the Certificate, for example `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM.

func (GetCertificateCertificatePolicySecretPropertyOutput) ElementType

func (GetCertificateCertificatePolicySecretPropertyOutput) ToGetCertificateCertificatePolicySecretPropertyOutput

func (o GetCertificateCertificatePolicySecretPropertyOutput) ToGetCertificateCertificatePolicySecretPropertyOutput() GetCertificateCertificatePolicySecretPropertyOutput

func (GetCertificateCertificatePolicySecretPropertyOutput) ToGetCertificateCertificatePolicySecretPropertyOutputWithContext

func (o GetCertificateCertificatePolicySecretPropertyOutput) ToGetCertificateCertificatePolicySecretPropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicySecretPropertyOutput

type GetCertificateCertificatePolicyX509CertificateProperty

type GetCertificateCertificatePolicyX509CertificateProperty struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages []string `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key.
	KeyUsages []string `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject string `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames []GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths int `pulumi:"validityInMonths"`
}

type GetCertificateCertificatePolicyX509CertificatePropertyArgs

type GetCertificateCertificatePolicyX509CertificatePropertyArgs struct {
	// A list of Extended/Enhanced Key Usages.
	ExtendedKeyUsages pulumi.StringArrayInput `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key.
	KeyUsages pulumi.StringArrayInput `pulumi:"keyUsages"`
	// The Certificate's Subject.
	Subject pulumi.StringInput `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayInput `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months.
	ValidityInMonths pulumi.IntInput `pulumi:"validityInMonths"`
}

func (GetCertificateCertificatePolicyX509CertificatePropertyArgs) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertyArgs) ToGetCertificateCertificatePolicyX509CertificatePropertyOutput

func (GetCertificateCertificatePolicyX509CertificatePropertyArgs) ToGetCertificateCertificatePolicyX509CertificatePropertyOutputWithContext

func (i GetCertificateCertificatePolicyX509CertificatePropertyArgs) ToGetCertificateCertificatePolicyX509CertificatePropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyX509CertificatePropertyOutput

type GetCertificateCertificatePolicyX509CertificatePropertyArray

type GetCertificateCertificatePolicyX509CertificatePropertyArray []GetCertificateCertificatePolicyX509CertificatePropertyInput

func (GetCertificateCertificatePolicyX509CertificatePropertyArray) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertyArray) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutput

func (GetCertificateCertificatePolicyX509CertificatePropertyArray) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutputWithContext

func (i GetCertificateCertificatePolicyX509CertificatePropertyArray) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput

type GetCertificateCertificatePolicyX509CertificatePropertyArrayInput

type GetCertificateCertificatePolicyX509CertificatePropertyArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutput() GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput
	ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput
}

GetCertificateCertificatePolicyX509CertificatePropertyArrayInput is an input type that accepts GetCertificateCertificatePolicyX509CertificatePropertyArray and GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyX509CertificatePropertyArrayInput` via:

GetCertificateCertificatePolicyX509CertificatePropertyArray{ GetCertificateCertificatePolicyX509CertificatePropertyArgs{...} }

type GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput

type GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput) Index

func (GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutput

func (GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutputWithContext

func (o GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyArrayOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyX509CertificatePropertyArrayOutput

type GetCertificateCertificatePolicyX509CertificatePropertyInput

type GetCertificateCertificatePolicyX509CertificatePropertyInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyX509CertificatePropertyOutput() GetCertificateCertificatePolicyX509CertificatePropertyOutput
	ToGetCertificateCertificatePolicyX509CertificatePropertyOutputWithContext(context.Context) GetCertificateCertificatePolicyX509CertificatePropertyOutput
}

GetCertificateCertificatePolicyX509CertificatePropertyInput is an input type that accepts GetCertificateCertificatePolicyX509CertificatePropertyArgs and GetCertificateCertificatePolicyX509CertificatePropertyOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyX509CertificatePropertyInput` via:

GetCertificateCertificatePolicyX509CertificatePropertyArgs{...}

type GetCertificateCertificatePolicyX509CertificatePropertyOutput

type GetCertificateCertificatePolicyX509CertificatePropertyOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) ExtendedKeyUsages

A list of Extended/Enhanced Key Usages.

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) KeyUsages

A list of uses associated with this Key.

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) Subject

The Certificate's Subject.

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) SubjectAlternativeNames

A `subjectAlternativeNames` block as defined below.

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyOutput

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyOutputWithContext

func (o GetCertificateCertificatePolicyX509CertificatePropertyOutput) ToGetCertificateCertificatePolicyX509CertificatePropertyOutputWithContext(ctx context.Context) GetCertificateCertificatePolicyX509CertificatePropertyOutput

func (GetCertificateCertificatePolicyX509CertificatePropertyOutput) ValidityInMonths

The Certificates Validity Period in Months.

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeName struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames []string `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails []string `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns []string `pulumi:"upns"`
}

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate.
	Emails pulumi.StringArrayInput `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate.
	Upns pulumi.StringArrayInput `pulumi:"upns"`
}

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutputWithContext

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray []GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameInput

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutputWithContext

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayInput

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput() GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput
	ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutputWithContext(context.Context) GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput
}

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayInput is an input type that accepts GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray and GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayInput` via:

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArray{ GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs{...} }

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutput) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArrayOutputWithContext

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameInput

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameInput interface {
	pulumi.Input

	ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput() GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput
	ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutputWithContext(context.Context) GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput
}

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameInput is an input type that accepts GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs and GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput values. You can construct a concrete instance of `GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameInput` via:

GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameArgs{...}

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput

type GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput struct{ *pulumi.OutputState }

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) DnsNames

A list of alternative DNS names (FQDNs) identified by the Certificate.

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) ElementType

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) Emails

A list of email addresses identified by this Certificate.

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) ToGetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutputWithContext

func (GetCertificateCertificatePolicyX509CertificatePropertySubjectAlternativeNameOutput) Upns

A list of User Principal Names identified by the Certificate.

type GetCertificateDataArgs

type GetCertificateDataArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId string `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Secret.
	Name string `pulumi:"name"`
	// Specifies the version of the certificate to look up.  (Defaults to latest)
	//
	// > **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version *string `pulumi:"version"`
}

A collection of arguments for invoking getCertificateData.

type GetCertificateDataOutputArgs

type GetCertificateDataOutputArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Secret.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies the version of the certificate to look up.  (Defaults to latest)
	//
	// > **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

A collection of arguments for invoking getCertificateData.

func (GetCertificateDataOutputArgs) ElementType

type GetCertificateDataResult

type GetCertificateDataResult struct {
	// Amount of certificates in the chain in case Key Vault Certificate is a bundle (e.g. has an intermediate certificate).
	CertificatesCount int `pulumi:"certificatesCount"`
	// Expiry date of certificate in RFC3339 format.
	Expires string `pulumi:"expires"`
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	Hex string `pulumi:"hex"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The Key Vault Certificate Key.
	Key        string `pulumi:"key"`
	KeyVaultId string `pulumi:"keyVaultId"`
	Name       string `pulumi:"name"`
	// Not Before date of certificate in RFC3339 format.
	NotBefore string `pulumi:"notBefore"`
	// The Key Vault Certificate in PEM format.
	Pem string `pulumi:"pem"`
	// A mapping of tags to assign to the resource.
	Tags    map[string]string `pulumi:"tags"`
	Version string            `pulumi:"version"`
}

A collection of values returned by getCertificateData.

func GetCertificateData

func GetCertificateData(ctx *pulumi.Context, args *GetCertificateDataArgs, opts ...pulumi.InvokeOption) (*GetCertificateDataResult, error)

Use this data source to access data stored in an existing Key Vault Certificate.

> **Note:** This data source uses the `GetSecret` function of the Azure API, to get the key of the certificate. Therefore you need secret/get permission

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKeyVault(ctx, &keyvault.LookupKeyVaultArgs{
			Name:              "examplekv",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		exampleGetCertificateData, err := keyvault.GetCertificateData(ctx, &keyvault.GetCertificateDataArgs{
			Name:       "secret-sauce",
			KeyVaultId: example.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("examplePem", exampleGetCertificateData.Pem)
		return nil
	})
}

```

type GetCertificateDataResultOutput

type GetCertificateDataResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificateData.

func (GetCertificateDataResultOutput) CertificatesCount

func (o GetCertificateDataResultOutput) CertificatesCount() pulumi.IntOutput

Amount of certificates in the chain in case Key Vault Certificate is a bundle (e.g. has an intermediate certificate).

func (GetCertificateDataResultOutput) ElementType

func (GetCertificateDataResultOutput) Expires

Expiry date of certificate in RFC3339 format.

func (GetCertificateDataResultOutput) Hex

The raw Key Vault Certificate data represented as a hexadecimal string.

func (GetCertificateDataResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (GetCertificateDataResultOutput) Key

The Key Vault Certificate Key.

func (GetCertificateDataResultOutput) KeyVaultId

func (GetCertificateDataResultOutput) Name

func (GetCertificateDataResultOutput) NotBefore

Not Before date of certificate in RFC3339 format.

func (GetCertificateDataResultOutput) Pem

The Key Vault Certificate in PEM format.

func (GetCertificateDataResultOutput) Tags

A mapping of tags to assign to the resource.

func (GetCertificateDataResultOutput) ToGetCertificateDataResultOutput

func (o GetCertificateDataResultOutput) ToGetCertificateDataResultOutput() GetCertificateDataResultOutput

func (GetCertificateDataResultOutput) ToGetCertificateDataResultOutputWithContext

func (o GetCertificateDataResultOutput) ToGetCertificateDataResultOutputWithContext(ctx context.Context) GetCertificateDataResultOutput

func (GetCertificateDataResultOutput) Version

type GetCertificateIssuerAdmin

type GetCertificateIssuerAdmin struct {
	// E-mail address of the admin.
	EmailAddress string `pulumi:"emailAddress"`
	// First name of the admin.
	FirstName string `pulumi:"firstName"`
	// Last name of the admin.
	LastName string `pulumi:"lastName"`
	// Phone number of the admin.
	Phone string `pulumi:"phone"`
}

type GetCertificateIssuerAdminArgs

type GetCertificateIssuerAdminArgs struct {
	// E-mail address of the admin.
	EmailAddress pulumi.StringInput `pulumi:"emailAddress"`
	// First name of the admin.
	FirstName pulumi.StringInput `pulumi:"firstName"`
	// Last name of the admin.
	LastName pulumi.StringInput `pulumi:"lastName"`
	// Phone number of the admin.
	Phone pulumi.StringInput `pulumi:"phone"`
}

func (GetCertificateIssuerAdminArgs) ElementType

func (GetCertificateIssuerAdminArgs) ToGetCertificateIssuerAdminOutput

func (i GetCertificateIssuerAdminArgs) ToGetCertificateIssuerAdminOutput() GetCertificateIssuerAdminOutput

func (GetCertificateIssuerAdminArgs) ToGetCertificateIssuerAdminOutputWithContext

func (i GetCertificateIssuerAdminArgs) ToGetCertificateIssuerAdminOutputWithContext(ctx context.Context) GetCertificateIssuerAdminOutput

type GetCertificateIssuerAdminArray

type GetCertificateIssuerAdminArray []GetCertificateIssuerAdminInput

func (GetCertificateIssuerAdminArray) ElementType

func (GetCertificateIssuerAdminArray) ToGetCertificateIssuerAdminArrayOutput

func (i GetCertificateIssuerAdminArray) ToGetCertificateIssuerAdminArrayOutput() GetCertificateIssuerAdminArrayOutput

func (GetCertificateIssuerAdminArray) ToGetCertificateIssuerAdminArrayOutputWithContext

func (i GetCertificateIssuerAdminArray) ToGetCertificateIssuerAdminArrayOutputWithContext(ctx context.Context) GetCertificateIssuerAdminArrayOutput

type GetCertificateIssuerAdminArrayInput

type GetCertificateIssuerAdminArrayInput interface {
	pulumi.Input

	ToGetCertificateIssuerAdminArrayOutput() GetCertificateIssuerAdminArrayOutput
	ToGetCertificateIssuerAdminArrayOutputWithContext(context.Context) GetCertificateIssuerAdminArrayOutput
}

GetCertificateIssuerAdminArrayInput is an input type that accepts GetCertificateIssuerAdminArray and GetCertificateIssuerAdminArrayOutput values. You can construct a concrete instance of `GetCertificateIssuerAdminArrayInput` via:

GetCertificateIssuerAdminArray{ GetCertificateIssuerAdminArgs{...} }

type GetCertificateIssuerAdminArrayOutput

type GetCertificateIssuerAdminArrayOutput struct{ *pulumi.OutputState }

func (GetCertificateIssuerAdminArrayOutput) ElementType

func (GetCertificateIssuerAdminArrayOutput) Index

func (GetCertificateIssuerAdminArrayOutput) ToGetCertificateIssuerAdminArrayOutput

func (o GetCertificateIssuerAdminArrayOutput) ToGetCertificateIssuerAdminArrayOutput() GetCertificateIssuerAdminArrayOutput

func (GetCertificateIssuerAdminArrayOutput) ToGetCertificateIssuerAdminArrayOutputWithContext

func (o GetCertificateIssuerAdminArrayOutput) ToGetCertificateIssuerAdminArrayOutputWithContext(ctx context.Context) GetCertificateIssuerAdminArrayOutput

type GetCertificateIssuerAdminInput

type GetCertificateIssuerAdminInput interface {
	pulumi.Input

	ToGetCertificateIssuerAdminOutput() GetCertificateIssuerAdminOutput
	ToGetCertificateIssuerAdminOutputWithContext(context.Context) GetCertificateIssuerAdminOutput
}

GetCertificateIssuerAdminInput is an input type that accepts GetCertificateIssuerAdminArgs and GetCertificateIssuerAdminOutput values. You can construct a concrete instance of `GetCertificateIssuerAdminInput` via:

GetCertificateIssuerAdminArgs{...}

type GetCertificateIssuerAdminOutput

type GetCertificateIssuerAdminOutput struct{ *pulumi.OutputState }

func (GetCertificateIssuerAdminOutput) ElementType

func (GetCertificateIssuerAdminOutput) EmailAddress

E-mail address of the admin.

func (GetCertificateIssuerAdminOutput) FirstName

First name of the admin.

func (GetCertificateIssuerAdminOutput) LastName

Last name of the admin.

func (GetCertificateIssuerAdminOutput) Phone

Phone number of the admin.

func (GetCertificateIssuerAdminOutput) ToGetCertificateIssuerAdminOutput

func (o GetCertificateIssuerAdminOutput) ToGetCertificateIssuerAdminOutput() GetCertificateIssuerAdminOutput

func (GetCertificateIssuerAdminOutput) ToGetCertificateIssuerAdminOutputWithContext

func (o GetCertificateIssuerAdminOutput) ToGetCertificateIssuerAdminOutputWithContext(ctx context.Context) GetCertificateIssuerAdminOutput

type GetCertificatesArgs added in v5.33.0

type GetCertificatesArgs struct {
	// Specifies whether to include certificates which are not completely provisioned. Defaults to true.
	IncludePending *bool `pulumi:"includePending"`
	// Specifies the ID of the Key Vault instance to fetch certificate names from, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId string `pulumi:"keyVaultId"`
}

A collection of arguments for invoking getCertificates.

type GetCertificatesCertificate added in v5.36.0

type GetCertificatesCertificate struct {
	// Whether this certificate is enabled.
	Enabled bool `pulumi:"enabled"`
	// The ID of this certificate.
	Id string `pulumi:"id"`
	// The name of certificate.
	Name string `pulumi:"name"`
	// The tags of this certificate.
	Tags map[string]string `pulumi:"tags"`
}

type GetCertificatesCertificateArgs added in v5.36.0

type GetCertificatesCertificateArgs struct {
	// Whether this certificate is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The ID of this certificate.
	Id pulumi.StringInput `pulumi:"id"`
	// The name of certificate.
	Name pulumi.StringInput `pulumi:"name"`
	// The tags of this certificate.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

func (GetCertificatesCertificateArgs) ElementType added in v5.36.0

func (GetCertificatesCertificateArgs) ToGetCertificatesCertificateOutput added in v5.36.0

func (i GetCertificatesCertificateArgs) ToGetCertificatesCertificateOutput() GetCertificatesCertificateOutput

func (GetCertificatesCertificateArgs) ToGetCertificatesCertificateOutputWithContext added in v5.36.0

func (i GetCertificatesCertificateArgs) ToGetCertificatesCertificateOutputWithContext(ctx context.Context) GetCertificatesCertificateOutput

type GetCertificatesCertificateArray added in v5.36.0

type GetCertificatesCertificateArray []GetCertificatesCertificateInput

func (GetCertificatesCertificateArray) ElementType added in v5.36.0

func (GetCertificatesCertificateArray) ToGetCertificatesCertificateArrayOutput added in v5.36.0

func (i GetCertificatesCertificateArray) ToGetCertificatesCertificateArrayOutput() GetCertificatesCertificateArrayOutput

func (GetCertificatesCertificateArray) ToGetCertificatesCertificateArrayOutputWithContext added in v5.36.0

func (i GetCertificatesCertificateArray) ToGetCertificatesCertificateArrayOutputWithContext(ctx context.Context) GetCertificatesCertificateArrayOutput

type GetCertificatesCertificateArrayInput added in v5.36.0

type GetCertificatesCertificateArrayInput interface {
	pulumi.Input

	ToGetCertificatesCertificateArrayOutput() GetCertificatesCertificateArrayOutput
	ToGetCertificatesCertificateArrayOutputWithContext(context.Context) GetCertificatesCertificateArrayOutput
}

GetCertificatesCertificateArrayInput is an input type that accepts GetCertificatesCertificateArray and GetCertificatesCertificateArrayOutput values. You can construct a concrete instance of `GetCertificatesCertificateArrayInput` via:

GetCertificatesCertificateArray{ GetCertificatesCertificateArgs{...} }

type GetCertificatesCertificateArrayOutput added in v5.36.0

type GetCertificatesCertificateArrayOutput struct{ *pulumi.OutputState }

func (GetCertificatesCertificateArrayOutput) ElementType added in v5.36.0

func (GetCertificatesCertificateArrayOutput) Index added in v5.36.0

func (GetCertificatesCertificateArrayOutput) ToGetCertificatesCertificateArrayOutput added in v5.36.0

func (o GetCertificatesCertificateArrayOutput) ToGetCertificatesCertificateArrayOutput() GetCertificatesCertificateArrayOutput

func (GetCertificatesCertificateArrayOutput) ToGetCertificatesCertificateArrayOutputWithContext added in v5.36.0

func (o GetCertificatesCertificateArrayOutput) ToGetCertificatesCertificateArrayOutputWithContext(ctx context.Context) GetCertificatesCertificateArrayOutput

type GetCertificatesCertificateInput added in v5.36.0

type GetCertificatesCertificateInput interface {
	pulumi.Input

	ToGetCertificatesCertificateOutput() GetCertificatesCertificateOutput
	ToGetCertificatesCertificateOutputWithContext(context.Context) GetCertificatesCertificateOutput
}

GetCertificatesCertificateInput is an input type that accepts GetCertificatesCertificateArgs and GetCertificatesCertificateOutput values. You can construct a concrete instance of `GetCertificatesCertificateInput` via:

GetCertificatesCertificateArgs{...}

type GetCertificatesCertificateOutput added in v5.36.0

type GetCertificatesCertificateOutput struct{ *pulumi.OutputState }

func (GetCertificatesCertificateOutput) ElementType added in v5.36.0

func (GetCertificatesCertificateOutput) Enabled added in v5.36.0

Whether this certificate is enabled.

func (GetCertificatesCertificateOutput) Id added in v5.36.0

The ID of this certificate.

func (GetCertificatesCertificateOutput) Name added in v5.36.0

The name of certificate.

func (GetCertificatesCertificateOutput) Tags added in v5.67.0

The tags of this certificate.

func (GetCertificatesCertificateOutput) ToGetCertificatesCertificateOutput added in v5.36.0

func (o GetCertificatesCertificateOutput) ToGetCertificatesCertificateOutput() GetCertificatesCertificateOutput

func (GetCertificatesCertificateOutput) ToGetCertificatesCertificateOutputWithContext added in v5.36.0

func (o GetCertificatesCertificateOutput) ToGetCertificatesCertificateOutputWithContext(ctx context.Context) GetCertificatesCertificateOutput

type GetCertificatesOutputArgs added in v5.33.0

type GetCertificatesOutputArgs struct {
	// Specifies whether to include certificates which are not completely provisioned. Defaults to true.
	IncludePending pulumi.BoolPtrInput `pulumi:"includePending"`
	// Specifies the ID of the Key Vault instance to fetch certificate names from, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
}

A collection of arguments for invoking getCertificates.

func (GetCertificatesOutputArgs) ElementType added in v5.33.0

func (GetCertificatesOutputArgs) ElementType() reflect.Type

type GetCertificatesResult added in v5.33.0

type GetCertificatesResult struct {
	// One or more `certificates` blocks as defined below.
	Certificates []GetCertificatesCertificate `pulumi:"certificates"`
	// The provider-assigned unique ID for this managed resource.
	Id             string `pulumi:"id"`
	IncludePending *bool  `pulumi:"includePending"`
	// The Key Vault ID.
	KeyVaultId string `pulumi:"keyVaultId"`
	// List containing names of certificates that exist in this Key Vault.
	Names []string `pulumi:"names"`
}

A collection of values returned by getCertificates.

func GetCertificates added in v5.33.0

func GetCertificates(ctx *pulumi.Context, args *GetCertificatesArgs, opts ...pulumi.InvokeOption) (*GetCertificatesResult, error)

Use this data source to retrieve a list of certificate names from an existing Key Vault.

type GetCertificatesResultOutput added in v5.33.0

type GetCertificatesResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificates.

func GetCertificatesOutput added in v5.33.0

func (GetCertificatesResultOutput) Certificates added in v5.36.0

One or more `certificates` blocks as defined below.

func (GetCertificatesResultOutput) ElementType added in v5.33.0

func (GetCertificatesResultOutput) Id added in v5.33.0

The provider-assigned unique ID for this managed resource.

func (GetCertificatesResultOutput) IncludePending added in v5.33.0

func (GetCertificatesResultOutput) KeyVaultId added in v5.33.0

The Key Vault ID.

func (GetCertificatesResultOutput) Names added in v5.33.0

List containing names of certificates that exist in this Key Vault.

func (GetCertificatesResultOutput) ToGetCertificatesResultOutput added in v5.33.0

func (o GetCertificatesResultOutput) ToGetCertificatesResultOutput() GetCertificatesResultOutput

func (GetCertificatesResultOutput) ToGetCertificatesResultOutputWithContext added in v5.33.0

func (o GetCertificatesResultOutput) ToGetCertificatesResultOutputWithContext(ctx context.Context) GetCertificatesResultOutput

type GetEncryptedValueArgs

type GetEncryptedValueArgs struct {
	// The Algorithm which should be used to Decrypt/Encrypt this Value. Possible values are `RSA1_5`, `RSA-OAEP` and `RSA-OAEP-256`.
	Algorithm string `pulumi:"algorithm"`
	// The Base64 URL Encoded Encrypted Data which should be decrypted into `plainTextValue`.
	EncryptedData *string `pulumi:"encryptedData"`
	// The ID of the Key Vault Key which should be used to Decrypt/Encrypt this Value.
	KeyVaultKeyId string `pulumi:"keyVaultKeyId"`
	// The plain-text value which should be Encrypted into `encryptedData`.
	//
	// > **Note:** One of either `encryptedData` or `plainTextValue` must be specified and is used to populate the encrypted/decrypted value for the other field.
	PlainTextValue *string `pulumi:"plainTextValue"`
}

A collection of arguments for invoking getEncryptedValue.

type GetEncryptedValueOutputArgs

type GetEncryptedValueOutputArgs struct {
	// The Algorithm which should be used to Decrypt/Encrypt this Value. Possible values are `RSA1_5`, `RSA-OAEP` and `RSA-OAEP-256`.
	Algorithm pulumi.StringInput `pulumi:"algorithm"`
	// The Base64 URL Encoded Encrypted Data which should be decrypted into `plainTextValue`.
	EncryptedData pulumi.StringPtrInput `pulumi:"encryptedData"`
	// The ID of the Key Vault Key which should be used to Decrypt/Encrypt this Value.
	KeyVaultKeyId pulumi.StringInput `pulumi:"keyVaultKeyId"`
	// The plain-text value which should be Encrypted into `encryptedData`.
	//
	// > **Note:** One of either `encryptedData` or `plainTextValue` must be specified and is used to populate the encrypted/decrypted value for the other field.
	PlainTextValue pulumi.StringPtrInput `pulumi:"plainTextValue"`
}

A collection of arguments for invoking getEncryptedValue.

func (GetEncryptedValueOutputArgs) ElementType

type GetEncryptedValueResult

type GetEncryptedValueResult struct {
	Algorithm string `pulumi:"algorithm"`
	// The Base64URL decoded string of `plainTextValue`. Because the API would remove padding characters of `plainTextValue` when encrypting, this attribute is useful to get the original value.
	DecodedPlainTextValue string  `pulumi:"decodedPlainTextValue"`
	EncryptedData         *string `pulumi:"encryptedData"`
	// The provider-assigned unique ID for this managed resource.
	Id             string  `pulumi:"id"`
	KeyVaultKeyId  string  `pulumi:"keyVaultKeyId"`
	PlainTextValue *string `pulumi:"plainTextValue"`
}

A collection of values returned by getEncryptedValue.

func GetEncryptedValue

func GetEncryptedValue(ctx *pulumi.Context, args *GetEncryptedValueArgs, opts ...pulumi.InvokeOption) (*GetEncryptedValueResult, error)

Encrypts or Decrypts a value using a Key Vault Key.

type GetEncryptedValueResultOutput

type GetEncryptedValueResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getEncryptedValue.

func (GetEncryptedValueResultOutput) Algorithm

func (GetEncryptedValueResultOutput) DecodedPlainTextValue added in v5.44.0

func (o GetEncryptedValueResultOutput) DecodedPlainTextValue() pulumi.StringOutput

The Base64URL decoded string of `plainTextValue`. Because the API would remove padding characters of `plainTextValue` when encrypting, this attribute is useful to get the original value.

func (GetEncryptedValueResultOutput) ElementType

func (GetEncryptedValueResultOutput) EncryptedData

func (GetEncryptedValueResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (GetEncryptedValueResultOutput) KeyVaultKeyId

func (GetEncryptedValueResultOutput) PlainTextValue

func (GetEncryptedValueResultOutput) ToGetEncryptedValueResultOutput

func (o GetEncryptedValueResultOutput) ToGetEncryptedValueResultOutput() GetEncryptedValueResultOutput

func (GetEncryptedValueResultOutput) ToGetEncryptedValueResultOutputWithContext

func (o GetEncryptedValueResultOutput) ToGetEncryptedValueResultOutputWithContext(ctx context.Context) GetEncryptedValueResultOutput

type GetKeyVaultAccessPolicy

type GetKeyVaultAccessPolicy struct {
	// The Object ID of a Azure Active Directory Application.
	ApplicationId string `pulumi:"applicationId"`
	// A list of certificate permissions applicable to this Access Policy.
	CertificatePermissions []string `pulumi:"certificatePermissions"`
	// A list of key permissions applicable to this Access Policy.
	KeyPermissions []string `pulumi:"keyPermissions"`
	// An Object ID of a User, Service Principal or Security Group.
	ObjectId string `pulumi:"objectId"`
	// A list of secret permissions applicable to this Access Policy.
	SecretPermissions []string `pulumi:"secretPermissions"`
	// A list of storage permissions applicable to this Access Policy.
	StoragePermissions []string `pulumi:"storagePermissions"`
	// The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.
	TenantId string `pulumi:"tenantId"`
}

type GetKeyVaultAccessPolicyArgs

type GetKeyVaultAccessPolicyArgs struct {
	// The Object ID of a Azure Active Directory Application.
	ApplicationId pulumi.StringInput `pulumi:"applicationId"`
	// A list of certificate permissions applicable to this Access Policy.
	CertificatePermissions pulumi.StringArrayInput `pulumi:"certificatePermissions"`
	// A list of key permissions applicable to this Access Policy.
	KeyPermissions pulumi.StringArrayInput `pulumi:"keyPermissions"`
	// An Object ID of a User, Service Principal or Security Group.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// A list of secret permissions applicable to this Access Policy.
	SecretPermissions pulumi.StringArrayInput `pulumi:"secretPermissions"`
	// A list of storage permissions applicable to this Access Policy.
	StoragePermissions pulumi.StringArrayInput `pulumi:"storagePermissions"`
	// The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.
	TenantId pulumi.StringInput `pulumi:"tenantId"`
}

func (GetKeyVaultAccessPolicyArgs) ElementType

func (GetKeyVaultAccessPolicyArgs) ToGetKeyVaultAccessPolicyOutput

func (i GetKeyVaultAccessPolicyArgs) ToGetKeyVaultAccessPolicyOutput() GetKeyVaultAccessPolicyOutput

func (GetKeyVaultAccessPolicyArgs) ToGetKeyVaultAccessPolicyOutputWithContext

func (i GetKeyVaultAccessPolicyArgs) ToGetKeyVaultAccessPolicyOutputWithContext(ctx context.Context) GetKeyVaultAccessPolicyOutput

type GetKeyVaultAccessPolicyArray

type GetKeyVaultAccessPolicyArray []GetKeyVaultAccessPolicyInput

func (GetKeyVaultAccessPolicyArray) ElementType

func (GetKeyVaultAccessPolicyArray) ToGetKeyVaultAccessPolicyArrayOutput

func (i GetKeyVaultAccessPolicyArray) ToGetKeyVaultAccessPolicyArrayOutput() GetKeyVaultAccessPolicyArrayOutput

func (GetKeyVaultAccessPolicyArray) ToGetKeyVaultAccessPolicyArrayOutputWithContext

func (i GetKeyVaultAccessPolicyArray) ToGetKeyVaultAccessPolicyArrayOutputWithContext(ctx context.Context) GetKeyVaultAccessPolicyArrayOutput

type GetKeyVaultAccessPolicyArrayInput

type GetKeyVaultAccessPolicyArrayInput interface {
	pulumi.Input

	ToGetKeyVaultAccessPolicyArrayOutput() GetKeyVaultAccessPolicyArrayOutput
	ToGetKeyVaultAccessPolicyArrayOutputWithContext(context.Context) GetKeyVaultAccessPolicyArrayOutput
}

GetKeyVaultAccessPolicyArrayInput is an input type that accepts GetKeyVaultAccessPolicyArray and GetKeyVaultAccessPolicyArrayOutput values. You can construct a concrete instance of `GetKeyVaultAccessPolicyArrayInput` via:

GetKeyVaultAccessPolicyArray{ GetKeyVaultAccessPolicyArgs{...} }

type GetKeyVaultAccessPolicyArrayOutput

type GetKeyVaultAccessPolicyArrayOutput struct{ *pulumi.OutputState }

func (GetKeyVaultAccessPolicyArrayOutput) ElementType

func (GetKeyVaultAccessPolicyArrayOutput) Index

func (GetKeyVaultAccessPolicyArrayOutput) ToGetKeyVaultAccessPolicyArrayOutput

func (o GetKeyVaultAccessPolicyArrayOutput) ToGetKeyVaultAccessPolicyArrayOutput() GetKeyVaultAccessPolicyArrayOutput

func (GetKeyVaultAccessPolicyArrayOutput) ToGetKeyVaultAccessPolicyArrayOutputWithContext

func (o GetKeyVaultAccessPolicyArrayOutput) ToGetKeyVaultAccessPolicyArrayOutputWithContext(ctx context.Context) GetKeyVaultAccessPolicyArrayOutput

type GetKeyVaultAccessPolicyInput

type GetKeyVaultAccessPolicyInput interface {
	pulumi.Input

	ToGetKeyVaultAccessPolicyOutput() GetKeyVaultAccessPolicyOutput
	ToGetKeyVaultAccessPolicyOutputWithContext(context.Context) GetKeyVaultAccessPolicyOutput
}

GetKeyVaultAccessPolicyInput is an input type that accepts GetKeyVaultAccessPolicyArgs and GetKeyVaultAccessPolicyOutput values. You can construct a concrete instance of `GetKeyVaultAccessPolicyInput` via:

GetKeyVaultAccessPolicyArgs{...}

type GetKeyVaultAccessPolicyOutput

type GetKeyVaultAccessPolicyOutput struct{ *pulumi.OutputState }

func (GetKeyVaultAccessPolicyOutput) ApplicationId

The Object ID of a Azure Active Directory Application.

func (GetKeyVaultAccessPolicyOutput) CertificatePermissions

func (o GetKeyVaultAccessPolicyOutput) CertificatePermissions() pulumi.StringArrayOutput

A list of certificate permissions applicable to this Access Policy.

func (GetKeyVaultAccessPolicyOutput) ElementType

func (GetKeyVaultAccessPolicyOutput) KeyPermissions

A list of key permissions applicable to this Access Policy.

func (GetKeyVaultAccessPolicyOutput) ObjectId

An Object ID of a User, Service Principal or Security Group.

func (GetKeyVaultAccessPolicyOutput) SecretPermissions

A list of secret permissions applicable to this Access Policy.

func (GetKeyVaultAccessPolicyOutput) StoragePermissions

A list of storage permissions applicable to this Access Policy.

func (GetKeyVaultAccessPolicyOutput) TenantId

The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.

func (GetKeyVaultAccessPolicyOutput) ToGetKeyVaultAccessPolicyOutput

func (o GetKeyVaultAccessPolicyOutput) ToGetKeyVaultAccessPolicyOutput() GetKeyVaultAccessPolicyOutput

func (GetKeyVaultAccessPolicyOutput) ToGetKeyVaultAccessPolicyOutputWithContext

func (o GetKeyVaultAccessPolicyOutput) ToGetKeyVaultAccessPolicyOutputWithContext(ctx context.Context) GetKeyVaultAccessPolicyOutput

type GetKeyVaultNetworkAcl

type GetKeyVaultNetworkAcl struct {
	Bypass                  string   `pulumi:"bypass"`
	DefaultAction           string   `pulumi:"defaultAction"`
	IpRules                 []string `pulumi:"ipRules"`
	VirtualNetworkSubnetIds []string `pulumi:"virtualNetworkSubnetIds"`
}

type GetKeyVaultNetworkAclArgs

type GetKeyVaultNetworkAclArgs struct {
	Bypass                  pulumi.StringInput      `pulumi:"bypass"`
	DefaultAction           pulumi.StringInput      `pulumi:"defaultAction"`
	IpRules                 pulumi.StringArrayInput `pulumi:"ipRules"`
	VirtualNetworkSubnetIds pulumi.StringArrayInput `pulumi:"virtualNetworkSubnetIds"`
}

func (GetKeyVaultNetworkAclArgs) ElementType

func (GetKeyVaultNetworkAclArgs) ElementType() reflect.Type

func (GetKeyVaultNetworkAclArgs) ToGetKeyVaultNetworkAclOutput

func (i GetKeyVaultNetworkAclArgs) ToGetKeyVaultNetworkAclOutput() GetKeyVaultNetworkAclOutput

func (GetKeyVaultNetworkAclArgs) ToGetKeyVaultNetworkAclOutputWithContext

func (i GetKeyVaultNetworkAclArgs) ToGetKeyVaultNetworkAclOutputWithContext(ctx context.Context) GetKeyVaultNetworkAclOutput

type GetKeyVaultNetworkAclArray

type GetKeyVaultNetworkAclArray []GetKeyVaultNetworkAclInput

func (GetKeyVaultNetworkAclArray) ElementType

func (GetKeyVaultNetworkAclArray) ElementType() reflect.Type

func (GetKeyVaultNetworkAclArray) ToGetKeyVaultNetworkAclArrayOutput

func (i GetKeyVaultNetworkAclArray) ToGetKeyVaultNetworkAclArrayOutput() GetKeyVaultNetworkAclArrayOutput

func (GetKeyVaultNetworkAclArray) ToGetKeyVaultNetworkAclArrayOutputWithContext

func (i GetKeyVaultNetworkAclArray) ToGetKeyVaultNetworkAclArrayOutputWithContext(ctx context.Context) GetKeyVaultNetworkAclArrayOutput

type GetKeyVaultNetworkAclArrayInput

type GetKeyVaultNetworkAclArrayInput interface {
	pulumi.Input

	ToGetKeyVaultNetworkAclArrayOutput() GetKeyVaultNetworkAclArrayOutput
	ToGetKeyVaultNetworkAclArrayOutputWithContext(context.Context) GetKeyVaultNetworkAclArrayOutput
}

GetKeyVaultNetworkAclArrayInput is an input type that accepts GetKeyVaultNetworkAclArray and GetKeyVaultNetworkAclArrayOutput values. You can construct a concrete instance of `GetKeyVaultNetworkAclArrayInput` via:

GetKeyVaultNetworkAclArray{ GetKeyVaultNetworkAclArgs{...} }

type GetKeyVaultNetworkAclArrayOutput

type GetKeyVaultNetworkAclArrayOutput struct{ *pulumi.OutputState }

func (GetKeyVaultNetworkAclArrayOutput) ElementType

func (GetKeyVaultNetworkAclArrayOutput) Index

func (GetKeyVaultNetworkAclArrayOutput) ToGetKeyVaultNetworkAclArrayOutput

func (o GetKeyVaultNetworkAclArrayOutput) ToGetKeyVaultNetworkAclArrayOutput() GetKeyVaultNetworkAclArrayOutput

func (GetKeyVaultNetworkAclArrayOutput) ToGetKeyVaultNetworkAclArrayOutputWithContext

func (o GetKeyVaultNetworkAclArrayOutput) ToGetKeyVaultNetworkAclArrayOutputWithContext(ctx context.Context) GetKeyVaultNetworkAclArrayOutput

type GetKeyVaultNetworkAclInput

type GetKeyVaultNetworkAclInput interface {
	pulumi.Input

	ToGetKeyVaultNetworkAclOutput() GetKeyVaultNetworkAclOutput
	ToGetKeyVaultNetworkAclOutputWithContext(context.Context) GetKeyVaultNetworkAclOutput
}

GetKeyVaultNetworkAclInput is an input type that accepts GetKeyVaultNetworkAclArgs and GetKeyVaultNetworkAclOutput values. You can construct a concrete instance of `GetKeyVaultNetworkAclInput` via:

GetKeyVaultNetworkAclArgs{...}

type GetKeyVaultNetworkAclOutput

type GetKeyVaultNetworkAclOutput struct{ *pulumi.OutputState }

func (GetKeyVaultNetworkAclOutput) Bypass

func (GetKeyVaultNetworkAclOutput) DefaultAction

func (GetKeyVaultNetworkAclOutput) ElementType

func (GetKeyVaultNetworkAclOutput) IpRules

func (GetKeyVaultNetworkAclOutput) ToGetKeyVaultNetworkAclOutput

func (o GetKeyVaultNetworkAclOutput) ToGetKeyVaultNetworkAclOutput() GetKeyVaultNetworkAclOutput

func (GetKeyVaultNetworkAclOutput) ToGetKeyVaultNetworkAclOutputWithContext

func (o GetKeyVaultNetworkAclOutput) ToGetKeyVaultNetworkAclOutputWithContext(ctx context.Context) GetKeyVaultNetworkAclOutput

func (GetKeyVaultNetworkAclOutput) VirtualNetworkSubnetIds

func (o GetKeyVaultNetworkAclOutput) VirtualNetworkSubnetIds() pulumi.StringArrayOutput

type GetManagedHardwareSecurityModuleRoleDefinitionPermission added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermission struct {
	// A list of action permission granted.
	Actions []string `pulumi:"actions"`
	// A list of data action permission granted.
	DataActions []string `pulumi:"dataActions"`
	// A list of action permission excluded (but not denied).
	NotActions []string `pulumi:"notActions"`
	// (Optional) A list of data action permission granted.
	NotDataActions []string `pulumi:"notDataActions"`
}

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs struct {
	// A list of action permission granted.
	Actions pulumi.StringArrayInput `pulumi:"actions"`
	// A list of data action permission granted.
	DataActions pulumi.StringArrayInput `pulumi:"dataActions"`
	// A list of action permission excluded (but not denied).
	NotActions pulumi.StringArrayInput `pulumi:"notActions"`
	// (Optional) A list of data action permission granted.
	NotDataActions pulumi.StringArrayInput `pulumi:"notDataActions"`
}

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ElementType added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext added in v5.59.0

func (i GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(ctx context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray []GetManagedHardwareSecurityModuleRoleDefinitionPermissionInput

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ElementType added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext added in v5.59.0

func (i GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(ctx context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput interface {
	pulumi.Input

	ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput() GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput
	ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput
}

GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput is an input type that accepts GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray and GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput values. You can construct a concrete instance of `GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput` via:

GetManagedHardwareSecurityModuleRoleDefinitionPermissionArray{ GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs{...} }

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput struct{ *pulumi.OutputState }

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ElementType added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) Index added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext added in v5.59.0

func (o GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(ctx context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionInput added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionInput interface {
	pulumi.Input

	ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput() GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput
	ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput
}

GetManagedHardwareSecurityModuleRoleDefinitionPermissionInput is an input type that accepts GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs and GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput values. You can construct a concrete instance of `GetManagedHardwareSecurityModuleRoleDefinitionPermissionInput` via:

GetManagedHardwareSecurityModuleRoleDefinitionPermissionArgs{...}

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

type GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput struct{ *pulumi.OutputState }

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) Actions added in v5.59.0

A list of action permission granted.

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) DataActions added in v5.59.0

A list of data action permission granted.

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ElementType added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) NotActions added in v5.59.0

A list of action permission excluded (but not denied).

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) NotDataActions added in v5.59.0

(Optional) A list of data action permission granted.

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

func (GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext added in v5.59.0

func (o GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToGetManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(ctx context.Context) GetManagedHardwareSecurityModuleRoleDefinitionPermissionOutput

type GetSecretsArgs

type GetSecretsArgs struct {
	// Specifies the ID of the Key Vault instance to fetch secret names from, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId string `pulumi:"keyVaultId"`
}

A collection of arguments for invoking getSecrets.

type GetSecretsOutputArgs

type GetSecretsOutputArgs struct {
	// Specifies the ID of the Key Vault instance to fetch secret names from, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
}

A collection of arguments for invoking getSecrets.

func (GetSecretsOutputArgs) ElementType

func (GetSecretsOutputArgs) ElementType() reflect.Type

type GetSecretsResult

type GetSecretsResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id         string `pulumi:"id"`
	KeyVaultId string `pulumi:"keyVaultId"`
	// List containing names of secrets that exist in this Key Vault.
	Names []string `pulumi:"names"`
	// One or more `secrets` blocks as defined below.
	Secrets []GetSecretsSecret `pulumi:"secrets"`
}

A collection of values returned by getSecrets.

func GetSecrets

func GetSecrets(ctx *pulumi.Context, args *GetSecretsArgs, opts ...pulumi.InvokeOption) (*GetSecretsResult, error)

Use this data source to retrieve a list of secret names from an existing Key Vault Secret.

type GetSecretsResultOutput

type GetSecretsResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getSecrets.

func (GetSecretsResultOutput) ElementType

func (GetSecretsResultOutput) ElementType() reflect.Type

func (GetSecretsResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (GetSecretsResultOutput) KeyVaultId

func (GetSecretsResultOutput) Names

List containing names of secrets that exist in this Key Vault.

func (GetSecretsResultOutput) Secrets added in v5.36.0

One or more `secrets` blocks as defined below.

func (GetSecretsResultOutput) ToGetSecretsResultOutput

func (o GetSecretsResultOutput) ToGetSecretsResultOutput() GetSecretsResultOutput

func (GetSecretsResultOutput) ToGetSecretsResultOutputWithContext

func (o GetSecretsResultOutput) ToGetSecretsResultOutputWithContext(ctx context.Context) GetSecretsResultOutput

type GetSecretsSecret added in v5.36.0

type GetSecretsSecret struct {
	// Whether this secret is enabled.
	Enabled bool `pulumi:"enabled"`
	// The ID of this secret.
	Id string `pulumi:"id"`
	// The name of secret.
	Name string `pulumi:"name"`
	// The tags of this secret.
	Tags map[string]string `pulumi:"tags"`
}

type GetSecretsSecretArgs added in v5.36.0

type GetSecretsSecretArgs struct {
	// Whether this secret is enabled.
	Enabled pulumi.BoolInput `pulumi:"enabled"`
	// The ID of this secret.
	Id pulumi.StringInput `pulumi:"id"`
	// The name of secret.
	Name pulumi.StringInput `pulumi:"name"`
	// The tags of this secret.
	Tags pulumi.StringMapInput `pulumi:"tags"`
}

func (GetSecretsSecretArgs) ElementType added in v5.36.0

func (GetSecretsSecretArgs) ElementType() reflect.Type

func (GetSecretsSecretArgs) ToGetSecretsSecretOutput added in v5.36.0

func (i GetSecretsSecretArgs) ToGetSecretsSecretOutput() GetSecretsSecretOutput

func (GetSecretsSecretArgs) ToGetSecretsSecretOutputWithContext added in v5.36.0

func (i GetSecretsSecretArgs) ToGetSecretsSecretOutputWithContext(ctx context.Context) GetSecretsSecretOutput

type GetSecretsSecretArray added in v5.36.0

type GetSecretsSecretArray []GetSecretsSecretInput

func (GetSecretsSecretArray) ElementType added in v5.36.0

func (GetSecretsSecretArray) ElementType() reflect.Type

func (GetSecretsSecretArray) ToGetSecretsSecretArrayOutput added in v5.36.0

func (i GetSecretsSecretArray) ToGetSecretsSecretArrayOutput() GetSecretsSecretArrayOutput

func (GetSecretsSecretArray) ToGetSecretsSecretArrayOutputWithContext added in v5.36.0

func (i GetSecretsSecretArray) ToGetSecretsSecretArrayOutputWithContext(ctx context.Context) GetSecretsSecretArrayOutput

type GetSecretsSecretArrayInput added in v5.36.0

type GetSecretsSecretArrayInput interface {
	pulumi.Input

	ToGetSecretsSecretArrayOutput() GetSecretsSecretArrayOutput
	ToGetSecretsSecretArrayOutputWithContext(context.Context) GetSecretsSecretArrayOutput
}

GetSecretsSecretArrayInput is an input type that accepts GetSecretsSecretArray and GetSecretsSecretArrayOutput values. You can construct a concrete instance of `GetSecretsSecretArrayInput` via:

GetSecretsSecretArray{ GetSecretsSecretArgs{...} }

type GetSecretsSecretArrayOutput added in v5.36.0

type GetSecretsSecretArrayOutput struct{ *pulumi.OutputState }

func (GetSecretsSecretArrayOutput) ElementType added in v5.36.0

func (GetSecretsSecretArrayOutput) Index added in v5.36.0

func (GetSecretsSecretArrayOutput) ToGetSecretsSecretArrayOutput added in v5.36.0

func (o GetSecretsSecretArrayOutput) ToGetSecretsSecretArrayOutput() GetSecretsSecretArrayOutput

func (GetSecretsSecretArrayOutput) ToGetSecretsSecretArrayOutputWithContext added in v5.36.0

func (o GetSecretsSecretArrayOutput) ToGetSecretsSecretArrayOutputWithContext(ctx context.Context) GetSecretsSecretArrayOutput

type GetSecretsSecretInput added in v5.36.0

type GetSecretsSecretInput interface {
	pulumi.Input

	ToGetSecretsSecretOutput() GetSecretsSecretOutput
	ToGetSecretsSecretOutputWithContext(context.Context) GetSecretsSecretOutput
}

GetSecretsSecretInput is an input type that accepts GetSecretsSecretArgs and GetSecretsSecretOutput values. You can construct a concrete instance of `GetSecretsSecretInput` via:

GetSecretsSecretArgs{...}

type GetSecretsSecretOutput added in v5.36.0

type GetSecretsSecretOutput struct{ *pulumi.OutputState }

func (GetSecretsSecretOutput) ElementType added in v5.36.0

func (GetSecretsSecretOutput) ElementType() reflect.Type

func (GetSecretsSecretOutput) Enabled added in v5.36.0

Whether this secret is enabled.

func (GetSecretsSecretOutput) Id added in v5.36.0

The ID of this secret.

func (GetSecretsSecretOutput) Name added in v5.36.0

The name of secret.

func (GetSecretsSecretOutput) Tags added in v5.67.0

The tags of this secret.

func (GetSecretsSecretOutput) ToGetSecretsSecretOutput added in v5.36.0

func (o GetSecretsSecretOutput) ToGetSecretsSecretOutput() GetSecretsSecretOutput

func (GetSecretsSecretOutput) ToGetSecretsSecretOutputWithContext added in v5.36.0

func (o GetSecretsSecretOutput) ToGetSecretsSecretOutputWithContext(ctx context.Context) GetSecretsSecretOutput

type Key

type Key struct {
	pulumi.CustomResourceState

	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringOutput `pulumi:"curve"`
	// The RSA public exponent of this Key Vault Key.
	E pulumi.StringOutput `pulumi:"e"`
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z'). When this parameter gets changed on reruns, if newer date is ahead of current date, an update is performed. If the newer date is before the current date, resource will be force created.
	ExpirationDate pulumi.StringPtrOutput `pulumi:"expirationDate"`
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayOutput `pulumi:"keyOpts"`
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrOutput `pulumi:"keySize"`
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringOutput `pulumi:"keyType"`
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The RSA modulus of this Key Vault Key.
	N pulumi.StringOutput `pulumi:"n"`
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	//
	// > **Note:** Once `expirationDate` is set, it's not possible to unset the key even if it is deleted & recreated as underlying Azure API uses the restore of the purged key.
	NotBeforeDate pulumi.StringPtrOutput `pulumi:"notBeforeDate"`
	// The OpenSSH encoded public key of this Key Vault Key.
	PublicKeyOpenssh pulumi.StringOutput `pulumi:"publicKeyOpenssh"`
	// The PEM encoded public key of this Key Vault Key.
	PublicKeyPem pulumi.StringOutput `pulumi:"publicKeyPem"`
	// The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId pulumi.StringOutput `pulumi:"resourceId"`
	// The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.
	ResourceVersionlessId pulumi.StringOutput `pulumi:"resourceVersionlessId"`
	// A `rotationPolicy` block as defined below.
	RotationPolicy KeyRotationPolicyPtrOutput `pulumi:"rotationPolicy"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The current version of the Key Vault Key.
	Version pulumi.StringOutput `pulumi:"version"`
	// The Base ID of the Key Vault Key.
	VersionlessId pulumi.StringOutput `pulumi:"versionlessId"`
	// The EC X component of this Key Vault Key.
	X pulumi.StringOutput `pulumi:"x"`
	// The EC Y component of this Key Vault Key.
	Y pulumi.StringOutput `pulumi:"y"`
}

Manages a Key Vault Key.

## Example Usage

> **Note:** To use this resource, your client should have RBAC roles with permissions like `Key Vault Crypto Officer` or `Key Vault Administrator` or an assigned Key Vault Access Policy with permissions `Create`,`Delete`,`Get`,`Purge`,`Recover`,`Update` and `GetRotationPolicy` for keys without Rotation Policy. Include `SetRotationPolicy` for keys with Rotation Policy.

> **Note:** The Azure Provider includes a Feature Toggle which will purge a Key Vault Key resource on destroy, rather than the default soft-delete. See `purgeSoftDeletedKeysOnDestroy` for more information.

### Additional Examples

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                    pulumi.String("examplekeyvault"),
			Location:                example.Location,
			ResourceGroupName:       example.Name,
			TenantId:                pulumi.String(current.TenantId),
			SkuName:                 pulumi.String("premium"),
			SoftDeleteRetentionDays: pulumi.Int(7),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Delete"),
						pulumi.String("Get"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
						pulumi.String("Update"),
						pulumi.String("GetRotationPolicy"),
						pulumi.String("SetRotationPolicy"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Set"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewKey(ctx, "generated", &keyvault.KeyArgs{
			Name:       pulumi.String("generated-certificate"),
			KeyVaultId: exampleKeyVault.ID(),
			KeyType:    pulumi.String("RSA"),
			KeySize:    pulumi.Int(2048),
			KeyOpts: pulumi.StringArray{
				pulumi.String("decrypt"),
				pulumi.String("encrypt"),
				pulumi.String("sign"),
				pulumi.String("unwrapKey"),
				pulumi.String("verify"),
				pulumi.String("wrapKey"),
			},
			RotationPolicy: &keyvault.KeyRotationPolicyArgs{
				Automatic: &keyvault.KeyRotationPolicyAutomaticArgs{
					TimeBeforeExpiry: pulumi.String("P30D"),
				},
				ExpireAfter:        pulumi.String("P90D"),
				NotifyBeforeExpiry: pulumi.String("P29D"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Key which is Enabled can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/key:Key example "https://example-keyvault.vault.azure.net/keys/example/fdf067c93bbb4b22bff4d8b7a9a56217" ```

func GetKey

func GetKey(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *KeyState, opts ...pulumi.ResourceOption) (*Key, error)

GetKey gets an existing Key resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewKey

func NewKey(ctx *pulumi.Context,
	name string, args *KeyArgs, opts ...pulumi.ResourceOption) (*Key, error)

NewKey registers a new resource with the given unique name, arguments, and options.

func (*Key) ElementType

func (*Key) ElementType() reflect.Type

func (*Key) ToKeyOutput

func (i *Key) ToKeyOutput() KeyOutput

func (*Key) ToKeyOutputWithContext

func (i *Key) ToKeyOutputWithContext(ctx context.Context) KeyOutput

type KeyArgs

type KeyArgs struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z'). When this parameter gets changed on reruns, if newer date is ahead of current date, an update is performed. If the newer date is before the current date, resource will be force created.
	ExpirationDate pulumi.StringPtrInput
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayInput
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrInput
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringInput
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	//
	// > **Note:** Once `expirationDate` is set, it's not possible to unset the key even if it is deleted & recreated as underlying Azure API uses the restore of the purged key.
	NotBeforeDate pulumi.StringPtrInput
	// A `rotationPolicy` block as defined below.
	RotationPolicy KeyRotationPolicyPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a Key resource.

func (KeyArgs) ElementType

func (KeyArgs) ElementType() reflect.Type

type KeyArray

type KeyArray []KeyInput

func (KeyArray) ElementType

func (KeyArray) ElementType() reflect.Type

func (KeyArray) ToKeyArrayOutput

func (i KeyArray) ToKeyArrayOutput() KeyArrayOutput

func (KeyArray) ToKeyArrayOutputWithContext

func (i KeyArray) ToKeyArrayOutputWithContext(ctx context.Context) KeyArrayOutput

type KeyArrayInput

type KeyArrayInput interface {
	pulumi.Input

	ToKeyArrayOutput() KeyArrayOutput
	ToKeyArrayOutputWithContext(context.Context) KeyArrayOutput
}

KeyArrayInput is an input type that accepts KeyArray and KeyArrayOutput values. You can construct a concrete instance of `KeyArrayInput` via:

KeyArray{ KeyArgs{...} }

type KeyArrayOutput

type KeyArrayOutput struct{ *pulumi.OutputState }

func (KeyArrayOutput) ElementType

func (KeyArrayOutput) ElementType() reflect.Type

func (KeyArrayOutput) Index

func (KeyArrayOutput) ToKeyArrayOutput

func (o KeyArrayOutput) ToKeyArrayOutput() KeyArrayOutput

func (KeyArrayOutput) ToKeyArrayOutputWithContext

func (o KeyArrayOutput) ToKeyArrayOutputWithContext(ctx context.Context) KeyArrayOutput

type KeyInput

type KeyInput interface {
	pulumi.Input

	ToKeyOutput() KeyOutput
	ToKeyOutputWithContext(ctx context.Context) KeyOutput
}

type KeyMap

type KeyMap map[string]KeyInput

func (KeyMap) ElementType

func (KeyMap) ElementType() reflect.Type

func (KeyMap) ToKeyMapOutput

func (i KeyMap) ToKeyMapOutput() KeyMapOutput

func (KeyMap) ToKeyMapOutputWithContext

func (i KeyMap) ToKeyMapOutputWithContext(ctx context.Context) KeyMapOutput

type KeyMapInput

type KeyMapInput interface {
	pulumi.Input

	ToKeyMapOutput() KeyMapOutput
	ToKeyMapOutputWithContext(context.Context) KeyMapOutput
}

KeyMapInput is an input type that accepts KeyMap and KeyMapOutput values. You can construct a concrete instance of `KeyMapInput` via:

KeyMap{ "key": KeyArgs{...} }

type KeyMapOutput

type KeyMapOutput struct{ *pulumi.OutputState }

func (KeyMapOutput) ElementType

func (KeyMapOutput) ElementType() reflect.Type

func (KeyMapOutput) MapIndex

func (o KeyMapOutput) MapIndex(k pulumi.StringInput) KeyOutput

func (KeyMapOutput) ToKeyMapOutput

func (o KeyMapOutput) ToKeyMapOutput() KeyMapOutput

func (KeyMapOutput) ToKeyMapOutputWithContext

func (o KeyMapOutput) ToKeyMapOutputWithContext(ctx context.Context) KeyMapOutput

type KeyOutput

type KeyOutput struct{ *pulumi.OutputState }

func (KeyOutput) Curve added in v5.5.0

func (o KeyOutput) Curve() pulumi.StringOutput

Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.

func (KeyOutput) E added in v5.5.0

The RSA public exponent of this Key Vault Key.

func (KeyOutput) ElementType

func (KeyOutput) ElementType() reflect.Type

func (KeyOutput) ExpirationDate added in v5.5.0

func (o KeyOutput) ExpirationDate() pulumi.StringPtrOutput

Expiration UTC datetime (Y-m-d'T'H:M:S'Z'). When this parameter gets changed on reruns, if newer date is ahead of current date, an update is performed. If the newer date is before the current date, resource will be force created.

func (KeyOutput) KeyOpts added in v5.5.0

func (o KeyOutput) KeyOpts() pulumi.StringArrayOutput

A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.

func (KeyOutput) KeySize added in v5.5.0

func (o KeyOutput) KeySize() pulumi.IntPtrOutput

Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.

func (KeyOutput) KeyType added in v5.5.0

func (o KeyOutput) KeyType() pulumi.StringOutput

Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.

func (KeyOutput) KeyVaultId added in v5.5.0

func (o KeyOutput) KeyVaultId() pulumi.StringOutput

The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.

func (KeyOutput) N added in v5.5.0

The RSA modulus of this Key Vault Key.

func (KeyOutput) Name added in v5.5.0

func (o KeyOutput) Name() pulumi.StringOutput

Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.

func (KeyOutput) NotBeforeDate added in v5.5.0

func (o KeyOutput) NotBeforeDate() pulumi.StringPtrOutput

Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').

> **Note:** Once `expirationDate` is set, it's not possible to unset the key even if it is deleted & recreated as underlying Azure API uses the restore of the purged key.

func (KeyOutput) PublicKeyOpenssh added in v5.5.0

func (o KeyOutput) PublicKeyOpenssh() pulumi.StringOutput

The OpenSSH encoded public key of this Key Vault Key.

func (KeyOutput) PublicKeyPem added in v5.5.0

func (o KeyOutput) PublicKeyPem() pulumi.StringOutput

The PEM encoded public key of this Key Vault Key.

func (KeyOutput) ResourceId added in v5.12.0

func (o KeyOutput) ResourceId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.

func (KeyOutput) ResourceVersionlessId added in v5.12.0

func (o KeyOutput) ResourceVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.

func (KeyOutput) RotationPolicy added in v5.37.0

func (o KeyOutput) RotationPolicy() KeyRotationPolicyPtrOutput

A `rotationPolicy` block as defined below.

func (KeyOutput) Tags added in v5.5.0

func (o KeyOutput) Tags() pulumi.StringMapOutput

A mapping of tags to assign to the resource.

func (KeyOutput) ToKeyOutput

func (o KeyOutput) ToKeyOutput() KeyOutput

func (KeyOutput) ToKeyOutputWithContext

func (o KeyOutput) ToKeyOutputWithContext(ctx context.Context) KeyOutput

func (KeyOutput) Version added in v5.5.0

func (o KeyOutput) Version() pulumi.StringOutput

The current version of the Key Vault Key.

func (KeyOutput) VersionlessId added in v5.5.0

func (o KeyOutput) VersionlessId() pulumi.StringOutput

The Base ID of the Key Vault Key.

func (KeyOutput) X added in v5.5.0

The EC X component of this Key Vault Key.

func (KeyOutput) Y added in v5.5.0

The EC Y component of this Key Vault Key.

type KeyRotationPolicy added in v5.37.0

type KeyRotationPolicy struct {
	// An `automatic` block as defined below.
	Automatic *KeyRotationPolicyAutomatic `pulumi:"automatic"`
	// Expire a Key Vault Key after given duration as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	ExpireAfter *string `pulumi:"expireAfter"`
	// Notify at a given duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	NotifyBeforeExpiry *string `pulumi:"notifyBeforeExpiry"`
}

type KeyRotationPolicyArgs added in v5.37.0

type KeyRotationPolicyArgs struct {
	// An `automatic` block as defined below.
	Automatic KeyRotationPolicyAutomaticPtrInput `pulumi:"automatic"`
	// Expire a Key Vault Key after given duration as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	ExpireAfter pulumi.StringPtrInput `pulumi:"expireAfter"`
	// Notify at a given duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	NotifyBeforeExpiry pulumi.StringPtrInput `pulumi:"notifyBeforeExpiry"`
}

func (KeyRotationPolicyArgs) ElementType added in v5.37.0

func (KeyRotationPolicyArgs) ElementType() reflect.Type

func (KeyRotationPolicyArgs) ToKeyRotationPolicyOutput added in v5.37.0

func (i KeyRotationPolicyArgs) ToKeyRotationPolicyOutput() KeyRotationPolicyOutput

func (KeyRotationPolicyArgs) ToKeyRotationPolicyOutputWithContext added in v5.37.0

func (i KeyRotationPolicyArgs) ToKeyRotationPolicyOutputWithContext(ctx context.Context) KeyRotationPolicyOutput

func (KeyRotationPolicyArgs) ToKeyRotationPolicyPtrOutput added in v5.37.0

func (i KeyRotationPolicyArgs) ToKeyRotationPolicyPtrOutput() KeyRotationPolicyPtrOutput

func (KeyRotationPolicyArgs) ToKeyRotationPolicyPtrOutputWithContext added in v5.37.0

func (i KeyRotationPolicyArgs) ToKeyRotationPolicyPtrOutputWithContext(ctx context.Context) KeyRotationPolicyPtrOutput

type KeyRotationPolicyAutomatic added in v5.37.0

type KeyRotationPolicyAutomatic struct {
	// Rotate automatically at a duration after create as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	TimeAfterCreation *string `pulumi:"timeAfterCreation"`
	// Rotate automatically at a duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	TimeBeforeExpiry *string `pulumi:"timeBeforeExpiry"`
}

type KeyRotationPolicyAutomaticArgs added in v5.37.0

type KeyRotationPolicyAutomaticArgs struct {
	// Rotate automatically at a duration after create as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	TimeAfterCreation pulumi.StringPtrInput `pulumi:"timeAfterCreation"`
	// Rotate automatically at a duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	TimeBeforeExpiry pulumi.StringPtrInput `pulumi:"timeBeforeExpiry"`
}

func (KeyRotationPolicyAutomaticArgs) ElementType added in v5.37.0

func (KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticOutput added in v5.37.0

func (i KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticOutput() KeyRotationPolicyAutomaticOutput

func (KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticOutputWithContext added in v5.37.0

func (i KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticOutputWithContext(ctx context.Context) KeyRotationPolicyAutomaticOutput

func (KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticPtrOutput added in v5.37.0

func (i KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticPtrOutput() KeyRotationPolicyAutomaticPtrOutput

func (KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticPtrOutputWithContext added in v5.37.0

func (i KeyRotationPolicyAutomaticArgs) ToKeyRotationPolicyAutomaticPtrOutputWithContext(ctx context.Context) KeyRotationPolicyAutomaticPtrOutput

type KeyRotationPolicyAutomaticInput added in v5.37.0

type KeyRotationPolicyAutomaticInput interface {
	pulumi.Input

	ToKeyRotationPolicyAutomaticOutput() KeyRotationPolicyAutomaticOutput
	ToKeyRotationPolicyAutomaticOutputWithContext(context.Context) KeyRotationPolicyAutomaticOutput
}

KeyRotationPolicyAutomaticInput is an input type that accepts KeyRotationPolicyAutomaticArgs and KeyRotationPolicyAutomaticOutput values. You can construct a concrete instance of `KeyRotationPolicyAutomaticInput` via:

KeyRotationPolicyAutomaticArgs{...}

type KeyRotationPolicyAutomaticOutput added in v5.37.0

type KeyRotationPolicyAutomaticOutput struct{ *pulumi.OutputState }

func (KeyRotationPolicyAutomaticOutput) ElementType added in v5.37.0

func (KeyRotationPolicyAutomaticOutput) TimeAfterCreation added in v5.37.0

Rotate automatically at a duration after create as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyAutomaticOutput) TimeBeforeExpiry added in v5.37.0

Rotate automatically at a duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticOutput added in v5.37.0

func (o KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticOutput() KeyRotationPolicyAutomaticOutput

func (KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticOutputWithContext added in v5.37.0

func (o KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticOutputWithContext(ctx context.Context) KeyRotationPolicyAutomaticOutput

func (KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticPtrOutput added in v5.37.0

func (o KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticPtrOutput() KeyRotationPolicyAutomaticPtrOutput

func (KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticPtrOutputWithContext added in v5.37.0

func (o KeyRotationPolicyAutomaticOutput) ToKeyRotationPolicyAutomaticPtrOutputWithContext(ctx context.Context) KeyRotationPolicyAutomaticPtrOutput

type KeyRotationPolicyAutomaticPtrInput added in v5.37.0

type KeyRotationPolicyAutomaticPtrInput interface {
	pulumi.Input

	ToKeyRotationPolicyAutomaticPtrOutput() KeyRotationPolicyAutomaticPtrOutput
	ToKeyRotationPolicyAutomaticPtrOutputWithContext(context.Context) KeyRotationPolicyAutomaticPtrOutput
}

KeyRotationPolicyAutomaticPtrInput is an input type that accepts KeyRotationPolicyAutomaticArgs, KeyRotationPolicyAutomaticPtr and KeyRotationPolicyAutomaticPtrOutput values. You can construct a concrete instance of `KeyRotationPolicyAutomaticPtrInput` via:

        KeyRotationPolicyAutomaticArgs{...}

or:

        nil

func KeyRotationPolicyAutomaticPtr added in v5.37.0

type KeyRotationPolicyAutomaticPtrOutput added in v5.37.0

type KeyRotationPolicyAutomaticPtrOutput struct{ *pulumi.OutputState }

func (KeyRotationPolicyAutomaticPtrOutput) Elem added in v5.37.0

func (KeyRotationPolicyAutomaticPtrOutput) ElementType added in v5.37.0

func (KeyRotationPolicyAutomaticPtrOutput) TimeAfterCreation added in v5.37.0

Rotate automatically at a duration after create as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyAutomaticPtrOutput) TimeBeforeExpiry added in v5.37.0

Rotate automatically at a duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyAutomaticPtrOutput) ToKeyRotationPolicyAutomaticPtrOutput added in v5.37.0

func (o KeyRotationPolicyAutomaticPtrOutput) ToKeyRotationPolicyAutomaticPtrOutput() KeyRotationPolicyAutomaticPtrOutput

func (KeyRotationPolicyAutomaticPtrOutput) ToKeyRotationPolicyAutomaticPtrOutputWithContext added in v5.37.0

func (o KeyRotationPolicyAutomaticPtrOutput) ToKeyRotationPolicyAutomaticPtrOutputWithContext(ctx context.Context) KeyRotationPolicyAutomaticPtrOutput

type KeyRotationPolicyInput added in v5.37.0

type KeyRotationPolicyInput interface {
	pulumi.Input

	ToKeyRotationPolicyOutput() KeyRotationPolicyOutput
	ToKeyRotationPolicyOutputWithContext(context.Context) KeyRotationPolicyOutput
}

KeyRotationPolicyInput is an input type that accepts KeyRotationPolicyArgs and KeyRotationPolicyOutput values. You can construct a concrete instance of `KeyRotationPolicyInput` via:

KeyRotationPolicyArgs{...}

type KeyRotationPolicyOutput added in v5.37.0

type KeyRotationPolicyOutput struct{ *pulumi.OutputState }

func (KeyRotationPolicyOutput) Automatic added in v5.37.0

An `automatic` block as defined below.

func (KeyRotationPolicyOutput) ElementType added in v5.37.0

func (KeyRotationPolicyOutput) ElementType() reflect.Type

func (KeyRotationPolicyOutput) ExpireAfter added in v5.37.0

Expire a Key Vault Key after given duration as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyOutput) NotifyBeforeExpiry added in v5.37.0

func (o KeyRotationPolicyOutput) NotifyBeforeExpiry() pulumi.StringPtrOutput

Notify at a given duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyOutput) ToKeyRotationPolicyOutput added in v5.37.0

func (o KeyRotationPolicyOutput) ToKeyRotationPolicyOutput() KeyRotationPolicyOutput

func (KeyRotationPolicyOutput) ToKeyRotationPolicyOutputWithContext added in v5.37.0

func (o KeyRotationPolicyOutput) ToKeyRotationPolicyOutputWithContext(ctx context.Context) KeyRotationPolicyOutput

func (KeyRotationPolicyOutput) ToKeyRotationPolicyPtrOutput added in v5.37.0

func (o KeyRotationPolicyOutput) ToKeyRotationPolicyPtrOutput() KeyRotationPolicyPtrOutput

func (KeyRotationPolicyOutput) ToKeyRotationPolicyPtrOutputWithContext added in v5.37.0

func (o KeyRotationPolicyOutput) ToKeyRotationPolicyPtrOutputWithContext(ctx context.Context) KeyRotationPolicyPtrOutput

type KeyRotationPolicyPtrInput added in v5.37.0

type KeyRotationPolicyPtrInput interface {
	pulumi.Input

	ToKeyRotationPolicyPtrOutput() KeyRotationPolicyPtrOutput
	ToKeyRotationPolicyPtrOutputWithContext(context.Context) KeyRotationPolicyPtrOutput
}

KeyRotationPolicyPtrInput is an input type that accepts KeyRotationPolicyArgs, KeyRotationPolicyPtr and KeyRotationPolicyPtrOutput values. You can construct a concrete instance of `KeyRotationPolicyPtrInput` via:

        KeyRotationPolicyArgs{...}

or:

        nil

func KeyRotationPolicyPtr added in v5.37.0

func KeyRotationPolicyPtr(v *KeyRotationPolicyArgs) KeyRotationPolicyPtrInput

type KeyRotationPolicyPtrOutput added in v5.37.0

type KeyRotationPolicyPtrOutput struct{ *pulumi.OutputState }

func (KeyRotationPolicyPtrOutput) Automatic added in v5.37.0

An `automatic` block as defined below.

func (KeyRotationPolicyPtrOutput) Elem added in v5.37.0

func (KeyRotationPolicyPtrOutput) ElementType added in v5.37.0

func (KeyRotationPolicyPtrOutput) ElementType() reflect.Type

func (KeyRotationPolicyPtrOutput) ExpireAfter added in v5.37.0

Expire a Key Vault Key after given duration as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyPtrOutput) NotifyBeforeExpiry added in v5.37.0

func (o KeyRotationPolicyPtrOutput) NotifyBeforeExpiry() pulumi.StringPtrOutput

Notify at a given duration before expiry as an [ISO 8601 duration](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (KeyRotationPolicyPtrOutput) ToKeyRotationPolicyPtrOutput added in v5.37.0

func (o KeyRotationPolicyPtrOutput) ToKeyRotationPolicyPtrOutput() KeyRotationPolicyPtrOutput

func (KeyRotationPolicyPtrOutput) ToKeyRotationPolicyPtrOutputWithContext added in v5.37.0

func (o KeyRotationPolicyPtrOutput) ToKeyRotationPolicyPtrOutputWithContext(ctx context.Context) KeyRotationPolicyPtrOutput

type KeyState

type KeyState struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-256K`, `P-384`, and `P-521`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringPtrInput
	// The RSA public exponent of this Key Vault Key.
	E pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z'). When this parameter gets changed on reruns, if newer date is ahead of current date, an update is performed. If the newer date is before the current date, resource will be force created.
	ExpirationDate pulumi.StringPtrInput
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayInput
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrInput
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringPtrInput
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The RSA modulus of this Key Vault Key.
	N pulumi.StringPtrInput
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	//
	// > **Note:** Once `expirationDate` is set, it's not possible to unset the key even if it is deleted & recreated as underlying Azure API uses the restore of the purged key.
	NotBeforeDate pulumi.StringPtrInput
	// The OpenSSH encoded public key of this Key Vault Key.
	PublicKeyOpenssh pulumi.StringPtrInput
	// The PEM encoded public key of this Key Vault Key.
	PublicKeyPem pulumi.StringPtrInput
	// The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId pulumi.StringPtrInput
	// The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.
	ResourceVersionlessId pulumi.StringPtrInput
	// A `rotationPolicy` block as defined below.
	RotationPolicy KeyRotationPolicyPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The current version of the Key Vault Key.
	Version pulumi.StringPtrInput
	// The Base ID of the Key Vault Key.
	VersionlessId pulumi.StringPtrInput
	// The EC X component of this Key Vault Key.
	X pulumi.StringPtrInput
	// The EC Y component of this Key Vault Key.
	Y pulumi.StringPtrInput
}

func (KeyState) ElementType

func (KeyState) ElementType() reflect.Type

type KeyVault

type KeyVault struct {
	pulumi.CustomResourceState

	// A list of up to 1024 objects describing access policies, as described below.
	//
	// > **NOTE** Since `accessPolicy` can be configured both inline and via the separate `keyvault.AccessPolicy` resource, we have to explicitly set it to empty slice (`[]`) to remove it.
	AccessPolicies KeyVaultAccessPolicyArrayOutput `pulumi:"accessPolicies"`
	// One or more `contact` block as defined below.
	//
	// > **Note:** This field can only be set once user has `managecontacts` certificate permission.
	//
	// > **Note:** This field can only be set when `publicNetworkAccessEnabled` is set to `true`. To manage the `contact` with `publicNetworkAccessEnabled` set to `false`, please use the `keyvault.CertificateContacts` resource instead of this property, and remove this property from the configuration. Especially for existing `keyvault.KeyVault`, this means you'll need to import the `keyvault.CertificateContacts` manually.
	//
	// Deprecated: As the `contact` property requires reaching out to the dataplane, to better support private endpoints and keyvaults with public network access disabled, `contact` will be removed in favour of the `keyvault.CertificateContacts` resource in version 4.0 of the AzureRM Provider.
	Contacts KeyVaultContactArrayOutput `pulumi:"contacts"`
	// Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.
	EnableRbacAuthorization pulumi.BoolPtrOutput `pulumi:"enableRbacAuthorization"`
	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
	EnabledForDeployment pulumi.BoolPtrOutput `pulumi:"enabledForDeployment"`
	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
	EnabledForDiskEncryption pulumi.BoolPtrOutput `pulumi:"enabledForDiskEncryption"`
	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
	EnabledForTemplateDeployment pulumi.BoolPtrOutput `pulumi:"enabledForTemplateDeployment"`
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringOutput `pulumi:"location"`
	// Specifies the name of the Key Vault. Changing this forces a new resource to be created. The name must be globally unique. If the vault is in a recoverable state then the vault will need to be purged before reusing the name.
	Name pulumi.StringOutput `pulumi:"name"`
	// A `networkAcls` block as defined below.
	NetworkAcls KeyVaultNetworkAclsOutput `pulumi:"networkAcls"`
	// Whether public network access is allowed for this Key Vault. Defaults to `true`.
	PublicNetworkAccessEnabled pulumi.BoolPtrOutput `pulumi:"publicNetworkAccessEnabled"`
	// Is Purge Protection enabled for this Key Vault?
	//
	// !> **Note:** Once Purge Protection has been Enabled it's not possible to Disable it. Support for [disabling purge protection is being tracked in this Azure API issue](https://github.com/Azure/azure-rest-api-specs/issues/8075). Deleting the Key Vault with Purge Protection Enabled will schedule the Key Vault to be deleted (which will happen by Azure in the configured number of days, currently 90 days).
	PurgeProtectionEnabled pulumi.BoolPtrOutput `pulumi:"purgeProtectionEnabled"`
	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringOutput `pulumi:"resourceGroupName"`
	// The Name of the SKU used for this Key Vault. Possible values are `standard` and `premium`.
	SkuName pulumi.StringOutput `pulumi:"skuName"`
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` (the default) days.
	//
	// > **Note:** This field can only be configured one time and cannot be updated.
	//
	// <!-- TODO: Remove `contact` and Notes in 4.0 -->
	SoftDeleteRetentionDays pulumi.IntPtrOutput `pulumi:"softDeleteRetentionDays"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
	// The URI of the Key Vault, used for performing operations on keys and secrets.
	VaultUri pulumi.StringOutput `pulumi:"vaultUri"`
}

Manages a Key Vault.

## Disclaimers

> **Note:** It's possible to define Key Vault Access Policies both within the `keyvault.KeyVault` resource via the `accessPolicy` block and by using the `keyvault.AccessPolicy` resource. However it's not possible to use both methods to manage Access Policies within a KeyVault, since there'll be conflicts.

> **Note:** It's possible to define Key Vault Certificate Contacts both within the `keyvault.KeyVault` resource via the `contact` block and by using the `keyvault.CertificateContacts` resource. However it's not possible to use both methods to manage Certificate Contacts within a KeyVault, since there'll be conflicts.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                     pulumi.String("examplekeyvault"),
			Location:                 example.Location,
			ResourceGroupName:        example.Name,
			EnabledForDiskEncryption: pulumi.Bool(true),
			TenantId:                 pulumi.String(current.TenantId),
			SoftDeleteRetentionDays:  pulumi.Int(7),
			PurgeProtectionEnabled:   pulumi.Bool(false),
			SkuName:                  pulumi.String("standard"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Get"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Get"),
					},
					StoragePermissions: pulumi.StringArray{
						pulumi.String("Get"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault's can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/keyVault:KeyVault example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.KeyVault/vaults/vault1 ```

func GetKeyVault

func GetKeyVault(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *KeyVaultState, opts ...pulumi.ResourceOption) (*KeyVault, error)

GetKeyVault gets an existing KeyVault resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewKeyVault

func NewKeyVault(ctx *pulumi.Context,
	name string, args *KeyVaultArgs, opts ...pulumi.ResourceOption) (*KeyVault, error)

NewKeyVault registers a new resource with the given unique name, arguments, and options.

func (*KeyVault) ElementType

func (*KeyVault) ElementType() reflect.Type

func (*KeyVault) ToKeyVaultOutput

func (i *KeyVault) ToKeyVaultOutput() KeyVaultOutput

func (*KeyVault) ToKeyVaultOutputWithContext

func (i *KeyVault) ToKeyVaultOutputWithContext(ctx context.Context) KeyVaultOutput

type KeyVaultAccessPolicy

type KeyVaultAccessPolicy struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId *string `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
	CertificatePermissions []string `pulumi:"certificatePermissions"`
	// List of key permissions. Possible values are `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
	KeyPermissions []string `pulumi:"keyPermissions"`
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
	ObjectId string `pulumi:"objectId"`
	// List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
	SecretPermissions []string `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
	StoragePermissions []string `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.
	TenantId string `pulumi:"tenantId"`
}

type KeyVaultAccessPolicyArgs

type KeyVaultAccessPolicyArgs struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId pulumi.StringPtrInput `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.
	CertificatePermissions pulumi.StringArrayInput `pulumi:"certificatePermissions"`
	// List of key permissions. Possible values are `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.
	KeyPermissions pulumi.StringArrayInput `pulumi:"keyPermissions"`
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.
	SecretPermissions pulumi.StringArrayInput `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.
	StoragePermissions pulumi.StringArrayInput `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.
	TenantId pulumi.StringInput `pulumi:"tenantId"`
}

func (KeyVaultAccessPolicyArgs) ElementType

func (KeyVaultAccessPolicyArgs) ElementType() reflect.Type

func (KeyVaultAccessPolicyArgs) ToKeyVaultAccessPolicyOutput

func (i KeyVaultAccessPolicyArgs) ToKeyVaultAccessPolicyOutput() KeyVaultAccessPolicyOutput

func (KeyVaultAccessPolicyArgs) ToKeyVaultAccessPolicyOutputWithContext

func (i KeyVaultAccessPolicyArgs) ToKeyVaultAccessPolicyOutputWithContext(ctx context.Context) KeyVaultAccessPolicyOutput

type KeyVaultAccessPolicyArray

type KeyVaultAccessPolicyArray []KeyVaultAccessPolicyInput

func (KeyVaultAccessPolicyArray) ElementType

func (KeyVaultAccessPolicyArray) ElementType() reflect.Type

func (KeyVaultAccessPolicyArray) ToKeyVaultAccessPolicyArrayOutput

func (i KeyVaultAccessPolicyArray) ToKeyVaultAccessPolicyArrayOutput() KeyVaultAccessPolicyArrayOutput

func (KeyVaultAccessPolicyArray) ToKeyVaultAccessPolicyArrayOutputWithContext

func (i KeyVaultAccessPolicyArray) ToKeyVaultAccessPolicyArrayOutputWithContext(ctx context.Context) KeyVaultAccessPolicyArrayOutput

type KeyVaultAccessPolicyArrayInput

type KeyVaultAccessPolicyArrayInput interface {
	pulumi.Input

	ToKeyVaultAccessPolicyArrayOutput() KeyVaultAccessPolicyArrayOutput
	ToKeyVaultAccessPolicyArrayOutputWithContext(context.Context) KeyVaultAccessPolicyArrayOutput
}

KeyVaultAccessPolicyArrayInput is an input type that accepts KeyVaultAccessPolicyArray and KeyVaultAccessPolicyArrayOutput values. You can construct a concrete instance of `KeyVaultAccessPolicyArrayInput` via:

KeyVaultAccessPolicyArray{ KeyVaultAccessPolicyArgs{...} }

type KeyVaultAccessPolicyArrayOutput

type KeyVaultAccessPolicyArrayOutput struct{ *pulumi.OutputState }

func (KeyVaultAccessPolicyArrayOutput) ElementType

func (KeyVaultAccessPolicyArrayOutput) Index

func (KeyVaultAccessPolicyArrayOutput) ToKeyVaultAccessPolicyArrayOutput

func (o KeyVaultAccessPolicyArrayOutput) ToKeyVaultAccessPolicyArrayOutput() KeyVaultAccessPolicyArrayOutput

func (KeyVaultAccessPolicyArrayOutput) ToKeyVaultAccessPolicyArrayOutputWithContext

func (o KeyVaultAccessPolicyArrayOutput) ToKeyVaultAccessPolicyArrayOutputWithContext(ctx context.Context) KeyVaultAccessPolicyArrayOutput

type KeyVaultAccessPolicyInput

type KeyVaultAccessPolicyInput interface {
	pulumi.Input

	ToKeyVaultAccessPolicyOutput() KeyVaultAccessPolicyOutput
	ToKeyVaultAccessPolicyOutputWithContext(context.Context) KeyVaultAccessPolicyOutput
}

KeyVaultAccessPolicyInput is an input type that accepts KeyVaultAccessPolicyArgs and KeyVaultAccessPolicyOutput values. You can construct a concrete instance of `KeyVaultAccessPolicyInput` via:

KeyVaultAccessPolicyArgs{...}

type KeyVaultAccessPolicyOutput

type KeyVaultAccessPolicyOutput struct{ *pulumi.OutputState }

func (KeyVaultAccessPolicyOutput) ApplicationId

The object ID of an Application in Azure Active Directory.

func (KeyVaultAccessPolicyOutput) CertificatePermissions

func (o KeyVaultAccessPolicyOutput) CertificatePermissions() pulumi.StringArrayOutput

List of certificate permissions, must be one or more from the following: `Backup`, `Create`, `Delete`, `DeleteIssuers`, `Get`, `GetIssuers`, `Import`, `List`, `ListIssuers`, `ManageContacts`, `ManageIssuers`, `Purge`, `Recover`, `Restore`, `SetIssuers` and `Update`.

func (KeyVaultAccessPolicyOutput) ElementType

func (KeyVaultAccessPolicyOutput) ElementType() reflect.Type

func (KeyVaultAccessPolicyOutput) KeyPermissions

List of key permissions. Possible values are `Backup`, `Create`, `Decrypt`, `Delete`, `Encrypt`, `Get`, `Import`, `List`, `Purge`, `Recover`, `Restore`, `Sign`, `UnwrapKey`, `Update`, `Verify`, `WrapKey`, `Release`, `Rotate`, `GetRotationPolicy` and `SetRotationPolicy`.

func (KeyVaultAccessPolicyOutput) ObjectId

The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.

func (KeyVaultAccessPolicyOutput) SecretPermissions

func (o KeyVaultAccessPolicyOutput) SecretPermissions() pulumi.StringArrayOutput

List of secret permissions, must be one or more from the following: `Backup`, `Delete`, `Get`, `List`, `Purge`, `Recover`, `Restore` and `Set`.

func (KeyVaultAccessPolicyOutput) StoragePermissions

func (o KeyVaultAccessPolicyOutput) StoragePermissions() pulumi.StringArrayOutput

List of storage permissions, must be one or more from the following: `Backup`, `Delete`, `DeleteSAS`, `Get`, `GetSAS`, `List`, `ListSAS`, `Purge`, `Recover`, `RegenerateKey`, `Restore`, `Set`, `SetSAS` and `Update`.

func (KeyVaultAccessPolicyOutput) TenantId

The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.

func (KeyVaultAccessPolicyOutput) ToKeyVaultAccessPolicyOutput

func (o KeyVaultAccessPolicyOutput) ToKeyVaultAccessPolicyOutput() KeyVaultAccessPolicyOutput

func (KeyVaultAccessPolicyOutput) ToKeyVaultAccessPolicyOutputWithContext

func (o KeyVaultAccessPolicyOutput) ToKeyVaultAccessPolicyOutputWithContext(ctx context.Context) KeyVaultAccessPolicyOutput

type KeyVaultArgs

type KeyVaultArgs struct {
	// A list of up to 1024 objects describing access policies, as described below.
	//
	// > **NOTE** Since `accessPolicy` can be configured both inline and via the separate `keyvault.AccessPolicy` resource, we have to explicitly set it to empty slice (`[]`) to remove it.
	AccessPolicies KeyVaultAccessPolicyArrayInput
	// One or more `contact` block as defined below.
	//
	// > **Note:** This field can only be set once user has `managecontacts` certificate permission.
	//
	// > **Note:** This field can only be set when `publicNetworkAccessEnabled` is set to `true`. To manage the `contact` with `publicNetworkAccessEnabled` set to `false`, please use the `keyvault.CertificateContacts` resource instead of this property, and remove this property from the configuration. Especially for existing `keyvault.KeyVault`, this means you'll need to import the `keyvault.CertificateContacts` manually.
	//
	// Deprecated: As the `contact` property requires reaching out to the dataplane, to better support private endpoints and keyvaults with public network access disabled, `contact` will be removed in favour of the `keyvault.CertificateContacts` resource in version 4.0 of the AzureRM Provider.
	Contacts KeyVaultContactArrayInput
	// Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.
	EnableRbacAuthorization pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
	EnabledForDeployment pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
	EnabledForDiskEncryption pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
	EnabledForTemplateDeployment pulumi.BoolPtrInput
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringPtrInput
	// Specifies the name of the Key Vault. Changing this forces a new resource to be created. The name must be globally unique. If the vault is in a recoverable state then the vault will need to be purged before reusing the name.
	Name pulumi.StringPtrInput
	// A `networkAcls` block as defined below.
	NetworkAcls KeyVaultNetworkAclsPtrInput
	// Whether public network access is allowed for this Key Vault. Defaults to `true`.
	PublicNetworkAccessEnabled pulumi.BoolPtrInput
	// Is Purge Protection enabled for this Key Vault?
	//
	// !> **Note:** Once Purge Protection has been Enabled it's not possible to Disable it. Support for [disabling purge protection is being tracked in this Azure API issue](https://github.com/Azure/azure-rest-api-specs/issues/8075). Deleting the Key Vault with Purge Protection Enabled will schedule the Key Vault to be deleted (which will happen by Azure in the configured number of days, currently 90 days).
	PurgeProtectionEnabled pulumi.BoolPtrInput
	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringInput
	// The Name of the SKU used for this Key Vault. Possible values are `standard` and `premium`.
	SkuName pulumi.StringInput
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` (the default) days.
	//
	// > **Note:** This field can only be configured one time and cannot be updated.
	//
	// <!-- TODO: Remove `contact` and Notes in 4.0 -->
	SoftDeleteRetentionDays pulumi.IntPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	TenantId pulumi.StringInput
}

The set of arguments for constructing a KeyVault resource.

func (KeyVaultArgs) ElementType

func (KeyVaultArgs) ElementType() reflect.Type

type KeyVaultArray

type KeyVaultArray []KeyVaultInput

func (KeyVaultArray) ElementType

func (KeyVaultArray) ElementType() reflect.Type

func (KeyVaultArray) ToKeyVaultArrayOutput

func (i KeyVaultArray) ToKeyVaultArrayOutput() KeyVaultArrayOutput

func (KeyVaultArray) ToKeyVaultArrayOutputWithContext

func (i KeyVaultArray) ToKeyVaultArrayOutputWithContext(ctx context.Context) KeyVaultArrayOutput

type KeyVaultArrayInput

type KeyVaultArrayInput interface {
	pulumi.Input

	ToKeyVaultArrayOutput() KeyVaultArrayOutput
	ToKeyVaultArrayOutputWithContext(context.Context) KeyVaultArrayOutput
}

KeyVaultArrayInput is an input type that accepts KeyVaultArray and KeyVaultArrayOutput values. You can construct a concrete instance of `KeyVaultArrayInput` via:

KeyVaultArray{ KeyVaultArgs{...} }

type KeyVaultArrayOutput

type KeyVaultArrayOutput struct{ *pulumi.OutputState }

func (KeyVaultArrayOutput) ElementType

func (KeyVaultArrayOutput) ElementType() reflect.Type

func (KeyVaultArrayOutput) Index

func (KeyVaultArrayOutput) ToKeyVaultArrayOutput

func (o KeyVaultArrayOutput) ToKeyVaultArrayOutput() KeyVaultArrayOutput

func (KeyVaultArrayOutput) ToKeyVaultArrayOutputWithContext

func (o KeyVaultArrayOutput) ToKeyVaultArrayOutputWithContext(ctx context.Context) KeyVaultArrayOutput

type KeyVaultContact

type KeyVaultContact struct {
	// E-mail address of the contact.
	Email string `pulumi:"email"`
	// Name of the contact.
	Name *string `pulumi:"name"`
	// Phone number of the contact.
	Phone *string `pulumi:"phone"`
}

type KeyVaultContactArgs

type KeyVaultContactArgs struct {
	// E-mail address of the contact.
	Email pulumi.StringInput `pulumi:"email"`
	// Name of the contact.
	Name pulumi.StringPtrInput `pulumi:"name"`
	// Phone number of the contact.
	Phone pulumi.StringPtrInput `pulumi:"phone"`
}

func (KeyVaultContactArgs) ElementType

func (KeyVaultContactArgs) ElementType() reflect.Type

func (KeyVaultContactArgs) ToKeyVaultContactOutput

func (i KeyVaultContactArgs) ToKeyVaultContactOutput() KeyVaultContactOutput

func (KeyVaultContactArgs) ToKeyVaultContactOutputWithContext

func (i KeyVaultContactArgs) ToKeyVaultContactOutputWithContext(ctx context.Context) KeyVaultContactOutput

type KeyVaultContactArray

type KeyVaultContactArray []KeyVaultContactInput

func (KeyVaultContactArray) ElementType

func (KeyVaultContactArray) ElementType() reflect.Type

func (KeyVaultContactArray) ToKeyVaultContactArrayOutput

func (i KeyVaultContactArray) ToKeyVaultContactArrayOutput() KeyVaultContactArrayOutput

func (KeyVaultContactArray) ToKeyVaultContactArrayOutputWithContext

func (i KeyVaultContactArray) ToKeyVaultContactArrayOutputWithContext(ctx context.Context) KeyVaultContactArrayOutput

type KeyVaultContactArrayInput

type KeyVaultContactArrayInput interface {
	pulumi.Input

	ToKeyVaultContactArrayOutput() KeyVaultContactArrayOutput
	ToKeyVaultContactArrayOutputWithContext(context.Context) KeyVaultContactArrayOutput
}

KeyVaultContactArrayInput is an input type that accepts KeyVaultContactArray and KeyVaultContactArrayOutput values. You can construct a concrete instance of `KeyVaultContactArrayInput` via:

KeyVaultContactArray{ KeyVaultContactArgs{...} }

type KeyVaultContactArrayOutput

type KeyVaultContactArrayOutput struct{ *pulumi.OutputState }

func (KeyVaultContactArrayOutput) ElementType

func (KeyVaultContactArrayOutput) ElementType() reflect.Type

func (KeyVaultContactArrayOutput) Index

func (KeyVaultContactArrayOutput) ToKeyVaultContactArrayOutput

func (o KeyVaultContactArrayOutput) ToKeyVaultContactArrayOutput() KeyVaultContactArrayOutput

func (KeyVaultContactArrayOutput) ToKeyVaultContactArrayOutputWithContext

func (o KeyVaultContactArrayOutput) ToKeyVaultContactArrayOutputWithContext(ctx context.Context) KeyVaultContactArrayOutput

type KeyVaultContactInput

type KeyVaultContactInput interface {
	pulumi.Input

	ToKeyVaultContactOutput() KeyVaultContactOutput
	ToKeyVaultContactOutputWithContext(context.Context) KeyVaultContactOutput
}

KeyVaultContactInput is an input type that accepts KeyVaultContactArgs and KeyVaultContactOutput values. You can construct a concrete instance of `KeyVaultContactInput` via:

KeyVaultContactArgs{...}

type KeyVaultContactOutput

type KeyVaultContactOutput struct{ *pulumi.OutputState }

func (KeyVaultContactOutput) ElementType

func (KeyVaultContactOutput) ElementType() reflect.Type

func (KeyVaultContactOutput) Email

E-mail address of the contact.

func (KeyVaultContactOutput) Name

Name of the contact.

func (KeyVaultContactOutput) Phone

Phone number of the contact.

func (KeyVaultContactOutput) ToKeyVaultContactOutput

func (o KeyVaultContactOutput) ToKeyVaultContactOutput() KeyVaultContactOutput

func (KeyVaultContactOutput) ToKeyVaultContactOutputWithContext

func (o KeyVaultContactOutput) ToKeyVaultContactOutputWithContext(ctx context.Context) KeyVaultContactOutput

type KeyVaultInput

type KeyVaultInput interface {
	pulumi.Input

	ToKeyVaultOutput() KeyVaultOutput
	ToKeyVaultOutputWithContext(ctx context.Context) KeyVaultOutput
}

type KeyVaultMap

type KeyVaultMap map[string]KeyVaultInput

func (KeyVaultMap) ElementType

func (KeyVaultMap) ElementType() reflect.Type

func (KeyVaultMap) ToKeyVaultMapOutput

func (i KeyVaultMap) ToKeyVaultMapOutput() KeyVaultMapOutput

func (KeyVaultMap) ToKeyVaultMapOutputWithContext

func (i KeyVaultMap) ToKeyVaultMapOutputWithContext(ctx context.Context) KeyVaultMapOutput

type KeyVaultMapInput

type KeyVaultMapInput interface {
	pulumi.Input

	ToKeyVaultMapOutput() KeyVaultMapOutput
	ToKeyVaultMapOutputWithContext(context.Context) KeyVaultMapOutput
}

KeyVaultMapInput is an input type that accepts KeyVaultMap and KeyVaultMapOutput values. You can construct a concrete instance of `KeyVaultMapInput` via:

KeyVaultMap{ "key": KeyVaultArgs{...} }

type KeyVaultMapOutput

type KeyVaultMapOutput struct{ *pulumi.OutputState }

func (KeyVaultMapOutput) ElementType

func (KeyVaultMapOutput) ElementType() reflect.Type

func (KeyVaultMapOutput) MapIndex

func (KeyVaultMapOutput) ToKeyVaultMapOutput

func (o KeyVaultMapOutput) ToKeyVaultMapOutput() KeyVaultMapOutput

func (KeyVaultMapOutput) ToKeyVaultMapOutputWithContext

func (o KeyVaultMapOutput) ToKeyVaultMapOutputWithContext(ctx context.Context) KeyVaultMapOutput

type KeyVaultNetworkAcls

type KeyVaultNetworkAcls struct {
	// Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
	Bypass string `pulumi:"bypass"`
	// The Default Action to use when no rules match from `ipRules` / `virtualNetworkSubnetIds`. Possible values are `Allow` and `Deny`.
	DefaultAction string `pulumi:"defaultAction"`
	// One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
	IpRules []string `pulumi:"ipRules"`
	// One or more Subnet IDs which should be able to access this Key Vault.
	VirtualNetworkSubnetIds []string `pulumi:"virtualNetworkSubnetIds"`
}

type KeyVaultNetworkAclsArgs

type KeyVaultNetworkAclsArgs struct {
	// Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
	Bypass pulumi.StringInput `pulumi:"bypass"`
	// The Default Action to use when no rules match from `ipRules` / `virtualNetworkSubnetIds`. Possible values are `Allow` and `Deny`.
	DefaultAction pulumi.StringInput `pulumi:"defaultAction"`
	// One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.
	IpRules pulumi.StringArrayInput `pulumi:"ipRules"`
	// One or more Subnet IDs which should be able to access this Key Vault.
	VirtualNetworkSubnetIds pulumi.StringArrayInput `pulumi:"virtualNetworkSubnetIds"`
}

func (KeyVaultNetworkAclsArgs) ElementType

func (KeyVaultNetworkAclsArgs) ElementType() reflect.Type

func (KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsOutput

func (i KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsOutput() KeyVaultNetworkAclsOutput

func (KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsOutputWithContext

func (i KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsOutputWithContext(ctx context.Context) KeyVaultNetworkAclsOutput

func (KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsPtrOutput

func (i KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsPtrOutput() KeyVaultNetworkAclsPtrOutput

func (KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsPtrOutputWithContext

func (i KeyVaultNetworkAclsArgs) ToKeyVaultNetworkAclsPtrOutputWithContext(ctx context.Context) KeyVaultNetworkAclsPtrOutput

type KeyVaultNetworkAclsInput

type KeyVaultNetworkAclsInput interface {
	pulumi.Input

	ToKeyVaultNetworkAclsOutput() KeyVaultNetworkAclsOutput
	ToKeyVaultNetworkAclsOutputWithContext(context.Context) KeyVaultNetworkAclsOutput
}

KeyVaultNetworkAclsInput is an input type that accepts KeyVaultNetworkAclsArgs and KeyVaultNetworkAclsOutput values. You can construct a concrete instance of `KeyVaultNetworkAclsInput` via:

KeyVaultNetworkAclsArgs{...}

type KeyVaultNetworkAclsOutput

type KeyVaultNetworkAclsOutput struct{ *pulumi.OutputState }

func (KeyVaultNetworkAclsOutput) Bypass

Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.

func (KeyVaultNetworkAclsOutput) DefaultAction

func (o KeyVaultNetworkAclsOutput) DefaultAction() pulumi.StringOutput

The Default Action to use when no rules match from `ipRules` / `virtualNetworkSubnetIds`. Possible values are `Allow` and `Deny`.

func (KeyVaultNetworkAclsOutput) ElementType

func (KeyVaultNetworkAclsOutput) ElementType() reflect.Type

func (KeyVaultNetworkAclsOutput) IpRules

One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.

func (KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsOutput

func (o KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsOutput() KeyVaultNetworkAclsOutput

func (KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsOutputWithContext

func (o KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsOutputWithContext(ctx context.Context) KeyVaultNetworkAclsOutput

func (KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsPtrOutput

func (o KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsPtrOutput() KeyVaultNetworkAclsPtrOutput

func (KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsPtrOutputWithContext

func (o KeyVaultNetworkAclsOutput) ToKeyVaultNetworkAclsPtrOutputWithContext(ctx context.Context) KeyVaultNetworkAclsPtrOutput

func (KeyVaultNetworkAclsOutput) VirtualNetworkSubnetIds

func (o KeyVaultNetworkAclsOutput) VirtualNetworkSubnetIds() pulumi.StringArrayOutput

One or more Subnet IDs which should be able to access this Key Vault.

type KeyVaultNetworkAclsPtrInput

type KeyVaultNetworkAclsPtrInput interface {
	pulumi.Input

	ToKeyVaultNetworkAclsPtrOutput() KeyVaultNetworkAclsPtrOutput
	ToKeyVaultNetworkAclsPtrOutputWithContext(context.Context) KeyVaultNetworkAclsPtrOutput
}

KeyVaultNetworkAclsPtrInput is an input type that accepts KeyVaultNetworkAclsArgs, KeyVaultNetworkAclsPtr and KeyVaultNetworkAclsPtrOutput values. You can construct a concrete instance of `KeyVaultNetworkAclsPtrInput` via:

        KeyVaultNetworkAclsArgs{...}

or:

        nil

type KeyVaultNetworkAclsPtrOutput

type KeyVaultNetworkAclsPtrOutput struct{ *pulumi.OutputState }

func (KeyVaultNetworkAclsPtrOutput) Bypass

Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.

func (KeyVaultNetworkAclsPtrOutput) DefaultAction

The Default Action to use when no rules match from `ipRules` / `virtualNetworkSubnetIds`. Possible values are `Allow` and `Deny`.

func (KeyVaultNetworkAclsPtrOutput) Elem

func (KeyVaultNetworkAclsPtrOutput) ElementType

func (KeyVaultNetworkAclsPtrOutput) IpRules

One or more IP Addresses, or CIDR Blocks which should be able to access the Key Vault.

func (KeyVaultNetworkAclsPtrOutput) ToKeyVaultNetworkAclsPtrOutput

func (o KeyVaultNetworkAclsPtrOutput) ToKeyVaultNetworkAclsPtrOutput() KeyVaultNetworkAclsPtrOutput

func (KeyVaultNetworkAclsPtrOutput) ToKeyVaultNetworkAclsPtrOutputWithContext

func (o KeyVaultNetworkAclsPtrOutput) ToKeyVaultNetworkAclsPtrOutputWithContext(ctx context.Context) KeyVaultNetworkAclsPtrOutput

func (KeyVaultNetworkAclsPtrOutput) VirtualNetworkSubnetIds

func (o KeyVaultNetworkAclsPtrOutput) VirtualNetworkSubnetIds() pulumi.StringArrayOutput

One or more Subnet IDs which should be able to access this Key Vault.

type KeyVaultOutput

type KeyVaultOutput struct{ *pulumi.OutputState }

func (KeyVaultOutput) AccessPolicies added in v5.5.0

A list of up to 1024 objects describing access policies, as described below.

> **NOTE** Since `accessPolicy` can be configured both inline and via the separate `keyvault.AccessPolicy` resource, we have to explicitly set it to empty slice (`[]`) to remove it.

func (KeyVaultOutput) Contacts deprecated added in v5.5.0

One or more `contact` block as defined below.

> **Note:** This field can only be set once user has `managecontacts` certificate permission.

> **Note:** This field can only be set when `publicNetworkAccessEnabled` is set to `true`. To manage the `contact` with `publicNetworkAccessEnabled` set to `false`, please use the `keyvault.CertificateContacts` resource instead of this property, and remove this property from the configuration. Especially for existing `keyvault.KeyVault`, this means you'll need to import the `keyvault.CertificateContacts` manually.

Deprecated: As the `contact` property requires reaching out to the dataplane, to better support private endpoints and keyvaults with public network access disabled, `contact` will be removed in favour of the `keyvault.CertificateContacts` resource in version 4.0 of the AzureRM Provider.

func (KeyVaultOutput) ElementType

func (KeyVaultOutput) ElementType() reflect.Type

func (KeyVaultOutput) EnableRbacAuthorization added in v5.5.0

func (o KeyVaultOutput) EnableRbacAuthorization() pulumi.BoolPtrOutput

Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.

func (KeyVaultOutput) EnabledForDeployment added in v5.5.0

func (o KeyVaultOutput) EnabledForDeployment() pulumi.BoolPtrOutput

Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.

func (KeyVaultOutput) EnabledForDiskEncryption added in v5.5.0

func (o KeyVaultOutput) EnabledForDiskEncryption() pulumi.BoolPtrOutput

Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.

func (KeyVaultOutput) EnabledForTemplateDeployment added in v5.5.0

func (o KeyVaultOutput) EnabledForTemplateDeployment() pulumi.BoolPtrOutput

Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.

func (KeyVaultOutput) Location added in v5.5.0

func (o KeyVaultOutput) Location() pulumi.StringOutput

Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.

func (KeyVaultOutput) Name added in v5.5.0

Specifies the name of the Key Vault. Changing this forces a new resource to be created. The name must be globally unique. If the vault is in a recoverable state then the vault will need to be purged before reusing the name.

func (KeyVaultOutput) NetworkAcls added in v5.5.0

func (o KeyVaultOutput) NetworkAcls() KeyVaultNetworkAclsOutput

A `networkAcls` block as defined below.

func (KeyVaultOutput) PublicNetworkAccessEnabled added in v5.16.0

func (o KeyVaultOutput) PublicNetworkAccessEnabled() pulumi.BoolPtrOutput

Whether public network access is allowed for this Key Vault. Defaults to `true`.

func (KeyVaultOutput) PurgeProtectionEnabled added in v5.5.0

func (o KeyVaultOutput) PurgeProtectionEnabled() pulumi.BoolPtrOutput

Is Purge Protection enabled for this Key Vault?

!> **Note:** Once Purge Protection has been Enabled it's not possible to Disable it. Support for [disabling purge protection is being tracked in this Azure API issue](https://github.com/Azure/azure-rest-api-specs/issues/8075). Deleting the Key Vault with Purge Protection Enabled will schedule the Key Vault to be deleted (which will happen by Azure in the configured number of days, currently 90 days).

func (KeyVaultOutput) ResourceGroupName added in v5.5.0

func (o KeyVaultOutput) ResourceGroupName() pulumi.StringOutput

The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.

func (KeyVaultOutput) SkuName added in v5.5.0

func (o KeyVaultOutput) SkuName() pulumi.StringOutput

The Name of the SKU used for this Key Vault. Possible values are `standard` and `premium`.

func (KeyVaultOutput) SoftDeleteRetentionDays added in v5.5.0

func (o KeyVaultOutput) SoftDeleteRetentionDays() pulumi.IntPtrOutput

The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` (the default) days.

> **Note:** This field can only be configured one time and cannot be updated.

<!-- TODO: Remove `contact` and Notes in 4.0 -->

func (KeyVaultOutput) Tags added in v5.5.0

A mapping of tags to assign to the resource.

func (KeyVaultOutput) TenantId added in v5.5.0

func (o KeyVaultOutput) TenantId() pulumi.StringOutput

The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.

func (KeyVaultOutput) ToKeyVaultOutput

func (o KeyVaultOutput) ToKeyVaultOutput() KeyVaultOutput

func (KeyVaultOutput) ToKeyVaultOutputWithContext

func (o KeyVaultOutput) ToKeyVaultOutputWithContext(ctx context.Context) KeyVaultOutput

func (KeyVaultOutput) VaultUri added in v5.5.0

func (o KeyVaultOutput) VaultUri() pulumi.StringOutput

The URI of the Key Vault, used for performing operations on keys and secrets.

type KeyVaultState

type KeyVaultState struct {
	// A list of up to 1024 objects describing access policies, as described below.
	//
	// > **NOTE** Since `accessPolicy` can be configured both inline and via the separate `keyvault.AccessPolicy` resource, we have to explicitly set it to empty slice (`[]`) to remove it.
	AccessPolicies KeyVaultAccessPolicyArrayInput
	// One or more `contact` block as defined below.
	//
	// > **Note:** This field can only be set once user has `managecontacts` certificate permission.
	//
	// > **Note:** This field can only be set when `publicNetworkAccessEnabled` is set to `true`. To manage the `contact` with `publicNetworkAccessEnabled` set to `false`, please use the `keyvault.CertificateContacts` resource instead of this property, and remove this property from the configuration. Especially for existing `keyvault.KeyVault`, this means you'll need to import the `keyvault.CertificateContacts` manually.
	//
	// Deprecated: As the `contact` property requires reaching out to the dataplane, to better support private endpoints and keyvaults with public network access disabled, `contact` will be removed in favour of the `keyvault.CertificateContacts` resource in version 4.0 of the AzureRM Provider.
	Contacts KeyVaultContactArrayInput
	// Boolean flag to specify whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions.
	EnableRbacAuthorization pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault.
	EnabledForDeployment pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys.
	EnabledForDiskEncryption pulumi.BoolPtrInput
	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault.
	EnabledForTemplateDeployment pulumi.BoolPtrInput
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringPtrInput
	// Specifies the name of the Key Vault. Changing this forces a new resource to be created. The name must be globally unique. If the vault is in a recoverable state then the vault will need to be purged before reusing the name.
	Name pulumi.StringPtrInput
	// A `networkAcls` block as defined below.
	NetworkAcls KeyVaultNetworkAclsPtrInput
	// Whether public network access is allowed for this Key Vault. Defaults to `true`.
	PublicNetworkAccessEnabled pulumi.BoolPtrInput
	// Is Purge Protection enabled for this Key Vault?
	//
	// !> **Note:** Once Purge Protection has been Enabled it's not possible to Disable it. Support for [disabling purge protection is being tracked in this Azure API issue](https://github.com/Azure/azure-rest-api-specs/issues/8075). Deleting the Key Vault with Purge Protection Enabled will schedule the Key Vault to be deleted (which will happen by Azure in the configured number of days, currently 90 days).
	PurgeProtectionEnabled pulumi.BoolPtrInput
	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringPtrInput
	// The Name of the SKU used for this Key Vault. Possible values are `standard` and `premium`.
	SkuName pulumi.StringPtrInput
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` (the default) days.
	//
	// > **Note:** This field can only be configured one time and cannot be updated.
	//
	// <!-- TODO: Remove `contact` and Notes in 4.0 -->
	SoftDeleteRetentionDays pulumi.IntPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	TenantId pulumi.StringPtrInput
	// The URI of the Key Vault, used for performing operations on keys and secrets.
	VaultUri pulumi.StringPtrInput
}

func (KeyVaultState) ElementType

func (KeyVaultState) ElementType() reflect.Type

type LookupAccessPolicyArgs

type LookupAccessPolicyArgs struct {
	// Specifies the name of the Management Template. Possible values are: `Key Management`,
	// `Secret Management`, `Certificate Management`, `Key & Secret Management`, `Key & Certificate Management`,
	// `Secret & Certificate Management`,  `Key, Secret, & Certificate Management`
	Name string `pulumi:"name"`
}

A collection of arguments for invoking getAccessPolicy.

type LookupAccessPolicyOutputArgs

type LookupAccessPolicyOutputArgs struct {
	// Specifies the name of the Management Template. Possible values are: `Key Management`,
	// `Secret Management`, `Certificate Management`, `Key & Secret Management`, `Key & Certificate Management`,
	// `Secret & Certificate Management`,  `Key, Secret, & Certificate Management`
	Name pulumi.StringInput `pulumi:"name"`
}

A collection of arguments for invoking getAccessPolicy.

func (LookupAccessPolicyOutputArgs) ElementType

type LookupAccessPolicyResult

type LookupAccessPolicyResult struct {
	// the certificate permissions for the access policy
	CertificatePermissions []string `pulumi:"certificatePermissions"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// the key permissions for the access policy
	KeyPermissions []string `pulumi:"keyPermissions"`
	Name           string   `pulumi:"name"`
	// the secret permissions for the access policy
	SecretPermissions []string `pulumi:"secretPermissions"`
}

A collection of values returned by getAccessPolicy.

func LookupAccessPolicy

func LookupAccessPolicy(ctx *pulumi.Context, args *LookupAccessPolicyArgs, opts ...pulumi.InvokeOption) (*LookupAccessPolicyResult, error)

Use this data source to access information about the permissions from the Management Key Vault Templates.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		contributor, err := keyvault.LookupAccessPolicy(ctx, &keyvault.LookupAccessPolicyArgs{
			Name: "Key Management",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("accessPolicyKeyPermissions", contributor.KeyPermissions)
		return nil
	})
}

```

type LookupAccessPolicyResultOutput

type LookupAccessPolicyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getAccessPolicy.

func (LookupAccessPolicyResultOutput) CertificatePermissions

func (o LookupAccessPolicyResultOutput) CertificatePermissions() pulumi.StringArrayOutput

the certificate permissions for the access policy

func (LookupAccessPolicyResultOutput) ElementType

func (LookupAccessPolicyResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupAccessPolicyResultOutput) KeyPermissions

the key permissions for the access policy

func (LookupAccessPolicyResultOutput) Name

func (LookupAccessPolicyResultOutput) SecretPermissions

the secret permissions for the access policy

func (LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutput

func (o LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutput() LookupAccessPolicyResultOutput

func (LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutputWithContext

func (o LookupAccessPolicyResultOutput) ToLookupAccessPolicyResultOutputWithContext(ctx context.Context) LookupAccessPolicyResultOutput

type LookupCertificateArgs

type LookupCertificateArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId string `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate.
	Name string `pulumi:"name"`
	// Specifies the version of the certificate to look up.  (Defaults to latest)
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version *string `pulumi:"version"`
}

A collection of arguments for invoking getCertificate.

type LookupCertificateIssuerArgs

type LookupCertificateIssuerArgs struct {
	// The ID of the Key Vault in which to locate the Certificate Issuer.
	KeyVaultId string `pulumi:"keyVaultId"`
	// The name of the Key Vault Certificate Issuer.
	Name string `pulumi:"name"`
}

A collection of arguments for invoking getCertificateIssuer.

type LookupCertificateIssuerOutputArgs

type LookupCertificateIssuerOutputArgs struct {
	// The ID of the Key Vault in which to locate the Certificate Issuer.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
	// The name of the Key Vault Certificate Issuer.
	Name pulumi.StringInput `pulumi:"name"`
}

A collection of arguments for invoking getCertificateIssuer.

func (LookupCertificateIssuerOutputArgs) ElementType

type LookupCertificateIssuerResult

type LookupCertificateIssuerResult struct {
	// The account number with the third-party Certificate Issuer.
	AccountId string `pulumi:"accountId"`
	// A list of `admin` blocks as defined below.
	Admins []GetCertificateIssuerAdmin `pulumi:"admins"`
	// The provider-assigned unique ID for this managed resource.
	Id         string `pulumi:"id"`
	KeyVaultId string `pulumi:"keyVaultId"`
	Name       string `pulumi:"name"`
	// The organization ID with the third-party Certificate Issuer.
	OrgId string `pulumi:"orgId"`
	// The name of the third-party Certificate Issuer.
	ProviderName string `pulumi:"providerName"`
}

A collection of values returned by getCertificateIssuer.

func LookupCertificateIssuer

func LookupCertificateIssuer(ctx *pulumi.Context, args *LookupCertificateIssuerArgs, opts ...pulumi.InvokeOption) (*LookupCertificateIssuerResult, error)

Use this data source to access information about an existing Key Vault Certificate Issuer.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKeyVault(ctx, &keyvault.LookupKeyVaultArgs{
			Name:              "mykeyvault",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		exampleGetCertificateIssuer, err := keyvault.LookupCertificateIssuer(ctx, &keyvault.LookupCertificateIssuerArgs{
			Name:       "existing",
			KeyVaultId: example.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("id", exampleGetCertificateIssuer.Id)
		return nil
	})
}

```

type LookupCertificateIssuerResultOutput

type LookupCertificateIssuerResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificateIssuer.

func (LookupCertificateIssuerResultOutput) AccountId

The account number with the third-party Certificate Issuer.

func (LookupCertificateIssuerResultOutput) Admins

A list of `admin` blocks as defined below.

func (LookupCertificateIssuerResultOutput) ElementType

func (LookupCertificateIssuerResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupCertificateIssuerResultOutput) KeyVaultId

func (LookupCertificateIssuerResultOutput) Name

func (LookupCertificateIssuerResultOutput) OrgId

The organization ID with the third-party Certificate Issuer.

func (LookupCertificateIssuerResultOutput) ProviderName

The name of the third-party Certificate Issuer.

func (LookupCertificateIssuerResultOutput) ToLookupCertificateIssuerResultOutput

func (o LookupCertificateIssuerResultOutput) ToLookupCertificateIssuerResultOutput() LookupCertificateIssuerResultOutput

func (LookupCertificateIssuerResultOutput) ToLookupCertificateIssuerResultOutputWithContext

func (o LookupCertificateIssuerResultOutput) ToLookupCertificateIssuerResultOutputWithContext(ctx context.Context) LookupCertificateIssuerResultOutput

type LookupCertificateOutputArgs

type LookupCertificateOutputArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies the version of the certificate to look up.  (Defaults to latest)
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

A collection of arguments for invoking getCertificate.

func (LookupCertificateOutputArgs) ElementType

type LookupCertificateResult

type LookupCertificateResult struct {
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData string `pulumi:"certificateData"`
	// The raw Key Vault Certificate data represented as a base64 string.
	CertificateDataBase64 string `pulumi:"certificateDataBase64"`
	// A `certificatePolicy` block as defined below.
	CertificatePolicies []GetCertificateCertificatePolicy `pulumi:"certificatePolicies"`
	// Expiry date of certificate in RFC3339 format.
	Expires string `pulumi:"expires"`
	// The provider-assigned unique ID for this managed resource.
	Id         string `pulumi:"id"`
	KeyVaultId string `pulumi:"keyVaultId"`
	// The name of the Certificate Issuer.
	Name string `pulumi:"name"`
	// Not Before date of certificate in RFC3339 format.
	NotBefore string `pulumi:"notBefore"`
	// The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceManagerId string `pulumi:"resourceManagerId"`
	// The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.
	ResourceManagerVersionlessId string `pulumi:"resourceManagerVersionlessId"`
	// The ID of the associated Key Vault Secret.
	SecretId string `pulumi:"secretId"`
	// A mapping of tags to assign to the resource.
	Tags map[string]string `pulumi:"tags"`
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint string `pulumi:"thumbprint"`
	// The current version of the Key Vault Certificate.
	Version string `pulumi:"version"`
	// The Base ID of the Key Vault Certificate.
	VersionlessId string `pulumi:"versionlessId"`
	// The Base ID of the Key Vault Secret.
	VersionlessSecretId string `pulumi:"versionlessSecretId"`
}

A collection of values returned by getCertificate.

func LookupCertificate

func LookupCertificate(ctx *pulumi.Context, args *LookupCertificateArgs, opts ...pulumi.InvokeOption) (*LookupCertificateResult, error)

Use this data source to access information about an existing Key Vault Certificate.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKeyVault(ctx, &keyvault.LookupKeyVaultArgs{
			Name:              "examplekv",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		exampleGetCertificate, err := keyvault.LookupCertificate(ctx, &keyvault.LookupCertificateArgs{
			Name:       "secret-sauce",
			KeyVaultId: example.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("certificateThumbprint", exampleGetCertificate.Thumbprint)
		return nil
	})
}

```

type LookupCertificateResultOutput

type LookupCertificateResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getCertificate.

func (LookupCertificateResultOutput) CertificateData

The raw Key Vault Certificate data represented as a hexadecimal string.

func (LookupCertificateResultOutput) CertificateDataBase64

func (o LookupCertificateResultOutput) CertificateDataBase64() pulumi.StringOutput

The raw Key Vault Certificate data represented as a base64 string.

func (LookupCertificateResultOutput) CertificatePolicies

A `certificatePolicy` block as defined below.

func (LookupCertificateResultOutput) ElementType

func (LookupCertificateResultOutput) Expires

Expiry date of certificate in RFC3339 format.

func (LookupCertificateResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupCertificateResultOutput) KeyVaultId

func (LookupCertificateResultOutput) Name

The name of the Certificate Issuer.

func (LookupCertificateResultOutput) NotBefore

Not Before date of certificate in RFC3339 format.

func (LookupCertificateResultOutput) ResourceManagerId added in v5.41.0

func (o LookupCertificateResultOutput) ResourceManagerId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Certificate. This property points to a specific version of a Key Vault Certificate, as such using this won't auto-rotate values if used in other Azure Services.

func (LookupCertificateResultOutput) ResourceManagerVersionlessId added in v5.41.0

func (o LookupCertificateResultOutput) ResourceManagerVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Certificate. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Certificate is updated.

func (LookupCertificateResultOutput) SecretId

The ID of the associated Key Vault Secret.

func (LookupCertificateResultOutput) Tags

A mapping of tags to assign to the resource.

func (LookupCertificateResultOutput) Thumbprint

The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.

func (LookupCertificateResultOutput) ToLookupCertificateResultOutput

func (o LookupCertificateResultOutput) ToLookupCertificateResultOutput() LookupCertificateResultOutput

func (LookupCertificateResultOutput) ToLookupCertificateResultOutputWithContext

func (o LookupCertificateResultOutput) ToLookupCertificateResultOutputWithContext(ctx context.Context) LookupCertificateResultOutput

func (LookupCertificateResultOutput) Version

The current version of the Key Vault Certificate.

func (LookupCertificateResultOutput) VersionlessId

The Base ID of the Key Vault Certificate.

func (LookupCertificateResultOutput) VersionlessSecretId

func (o LookupCertificateResultOutput) VersionlessSecretId() pulumi.StringOutput

The Base ID of the Key Vault Secret.

type LookupKeyArgs

type LookupKeyArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId string `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Key.
	Name string `pulumi:"name"`
}

A collection of arguments for invoking getKey.

type LookupKeyOutputArgs

type LookupKeyOutputArgs struct {
	// Specifies the ID of the Key Vault instance where the Secret resides, available on the `keyvault.KeyVault` Data Source / Resource.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Key.
	Name pulumi.StringInput `pulumi:"name"`
}

A collection of arguments for invoking getKey.

func (LookupKeyOutputArgs) ElementType

func (LookupKeyOutputArgs) ElementType() reflect.Type

type LookupKeyResult

type LookupKeyResult struct {
	// The EC Curve name of this Key Vault Key.
	Curve string `pulumi:"curve"`
	// The RSA public exponent of this Key Vault Key.
	E string `pulumi:"e"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// A list of JSON web key operations assigned to this Key Vault Key
	KeyOpts []string `pulumi:"keyOpts"`
	// Specifies the Size of this Key Vault Key.
	KeySize int `pulumi:"keySize"`
	// Specifies the Key Type of this Key Vault Key
	KeyType    string `pulumi:"keyType"`
	KeyVaultId string `pulumi:"keyVaultId"`
	// The RSA modulus of this Key Vault Key.
	N    string `pulumi:"n"`
	Name string `pulumi:"name"`
	// The OpenSSH encoded public key of this Key Vault Key.
	PublicKeyOpenssh string `pulumi:"publicKeyOpenssh"`
	// The PEM encoded public key of this Key Vault Key.
	PublicKeyPem string `pulumi:"publicKeyPem"`
	// The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId string `pulumi:"resourceId"`
	// The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.
	ResourceVersionlessId string `pulumi:"resourceVersionlessId"`
	// A mapping of tags assigned to this Key Vault Key.
	Tags map[string]string `pulumi:"tags"`
	// The current version of the Key Vault Key.
	Version string `pulumi:"version"`
	// The Base ID of the Key Vault Key.
	VersionlessId string `pulumi:"versionlessId"`
	// The EC X component of this Key Vault Key.
	X string `pulumi:"x"`
	// The EC Y component of this Key Vault Key.
	Y string `pulumi:"y"`
}

A collection of values returned by getKey.

func LookupKey

func LookupKey(ctx *pulumi.Context, args *LookupKeyArgs, opts ...pulumi.InvokeOption) (*LookupKeyResult, error)

Use this data source to access information about an existing Key Vault Key.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKey(ctx, &keyvault.LookupKeyArgs{
			Name:       "secret-sauce",
			KeyVaultId: existing.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("keyType", example.KeyType)
		return nil
	})
}

```

type LookupKeyResultOutput

type LookupKeyResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getKey.

func (LookupKeyResultOutput) Curve

The EC Curve name of this Key Vault Key.

func (LookupKeyResultOutput) E

The RSA public exponent of this Key Vault Key.

func (LookupKeyResultOutput) ElementType

func (LookupKeyResultOutput) ElementType() reflect.Type

func (LookupKeyResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupKeyResultOutput) KeyOpts

A list of JSON web key operations assigned to this Key Vault Key

func (LookupKeyResultOutput) KeySize

Specifies the Size of this Key Vault Key.

func (LookupKeyResultOutput) KeyType

Specifies the Key Type of this Key Vault Key

func (LookupKeyResultOutput) KeyVaultId

func (o LookupKeyResultOutput) KeyVaultId() pulumi.StringOutput

func (LookupKeyResultOutput) N

The RSA modulus of this Key Vault Key.

func (LookupKeyResultOutput) Name

func (LookupKeyResultOutput) PublicKeyOpenssh

func (o LookupKeyResultOutput) PublicKeyOpenssh() pulumi.StringOutput

The OpenSSH encoded public key of this Key Vault Key.

func (LookupKeyResultOutput) PublicKeyPem

func (o LookupKeyResultOutput) PublicKeyPem() pulumi.StringOutput

The PEM encoded public key of this Key Vault Key.

func (LookupKeyResultOutput) ResourceId added in v5.12.0

func (o LookupKeyResultOutput) ResourceId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Key. This property points to a specific version of a Key Vault Key, as such using this won't auto-rotate values if used in other Azure Services.

func (LookupKeyResultOutput) ResourceVersionlessId added in v5.12.0

func (o LookupKeyResultOutput) ResourceVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Key. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Key is updated.

func (LookupKeyResultOutput) Tags

A mapping of tags assigned to this Key Vault Key.

func (LookupKeyResultOutput) ToLookupKeyResultOutput

func (o LookupKeyResultOutput) ToLookupKeyResultOutput() LookupKeyResultOutput

func (LookupKeyResultOutput) ToLookupKeyResultOutputWithContext

func (o LookupKeyResultOutput) ToLookupKeyResultOutputWithContext(ctx context.Context) LookupKeyResultOutput

func (LookupKeyResultOutput) Version

The current version of the Key Vault Key.

func (LookupKeyResultOutput) VersionlessId

func (o LookupKeyResultOutput) VersionlessId() pulumi.StringOutput

The Base ID of the Key Vault Key.

func (LookupKeyResultOutput) X

The EC X component of this Key Vault Key.

func (LookupKeyResultOutput) Y

The EC Y component of this Key Vault Key.

type LookupKeyVaultArgs

type LookupKeyVaultArgs struct {
	// Specifies the name of the Key Vault.
	Name string `pulumi:"name"`
	// The name of the Resource Group in which the Key Vault exists.
	ResourceGroupName string `pulumi:"resourceGroupName"`
}

A collection of arguments for invoking getKeyVault.

type LookupKeyVaultOutputArgs

type LookupKeyVaultOutputArgs struct {
	// Specifies the name of the Key Vault.
	Name pulumi.StringInput `pulumi:"name"`
	// The name of the Resource Group in which the Key Vault exists.
	ResourceGroupName pulumi.StringInput `pulumi:"resourceGroupName"`
}

A collection of arguments for invoking getKeyVault.

func (LookupKeyVaultOutputArgs) ElementType

func (LookupKeyVaultOutputArgs) ElementType() reflect.Type

type LookupKeyVaultResult

type LookupKeyVaultResult struct {
	// One or more `accessPolicy` blocks as defined below.
	AccessPolicies []GetKeyVaultAccessPolicy `pulumi:"accessPolicies"`
	// Is Role Based Access Control (RBAC) for authorization of data actions enabled on this Key Vault?
	EnableRbacAuthorization bool `pulumi:"enableRbacAuthorization"`
	// Can Azure Virtual Machines retrieve certificates stored as secrets from the Key Vault?
	EnabledForDeployment bool `pulumi:"enabledForDeployment"`
	// Can Azure Disk Encryption retrieve secrets from the Key Vault?
	EnabledForDiskEncryption bool `pulumi:"enabledForDiskEncryption"`
	// Can Azure Resource Manager retrieve secrets from the Key Vault?
	EnabledForTemplateDeployment bool `pulumi:"enabledForTemplateDeployment"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The Azure Region in which the Key Vault exists.
	Location    string                  `pulumi:"location"`
	Name        string                  `pulumi:"name"`
	NetworkAcls []GetKeyVaultNetworkAcl `pulumi:"networkAcls"`
	// Is public network access enabled on this Key Vault?
	PublicNetworkAccessEnabled bool `pulumi:"publicNetworkAccessEnabled"`
	// Is purge protection enabled on this Key Vault?
	PurgeProtectionEnabled bool   `pulumi:"purgeProtectionEnabled"`
	ResourceGroupName      string `pulumi:"resourceGroupName"`
	// The Name of the SKU used for this Key Vault.
	SkuName string `pulumi:"skuName"`
	// A mapping of tags assigned to the Key Vault.
	Tags map[string]string `pulumi:"tags"`
	// The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.
	TenantId string `pulumi:"tenantId"`
	// The URI of the vault for performing operations on keys and secrets.
	VaultUri string `pulumi:"vaultUri"`
}

A collection of values returned by getKeyVault.

func LookupKeyVault

func LookupKeyVault(ctx *pulumi.Context, args *LookupKeyVaultArgs, opts ...pulumi.InvokeOption) (*LookupKeyVaultResult, error)

Use this data source to access information about an existing Key Vault.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupKeyVault(ctx, &keyvault.LookupKeyVaultArgs{
			Name:              "mykeyvault",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("vaultUri", example.VaultUri)
		return nil
	})
}

```

type LookupKeyVaultResultOutput

type LookupKeyVaultResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getKeyVault.

func (LookupKeyVaultResultOutput) AccessPolicies

One or more `accessPolicy` blocks as defined below.

func (LookupKeyVaultResultOutput) ElementType

func (LookupKeyVaultResultOutput) ElementType() reflect.Type

func (LookupKeyVaultResultOutput) EnableRbacAuthorization

func (o LookupKeyVaultResultOutput) EnableRbacAuthorization() pulumi.BoolOutput

Is Role Based Access Control (RBAC) for authorization of data actions enabled on this Key Vault?

func (LookupKeyVaultResultOutput) EnabledForDeployment

func (o LookupKeyVaultResultOutput) EnabledForDeployment() pulumi.BoolOutput

Can Azure Virtual Machines retrieve certificates stored as secrets from the Key Vault?

func (LookupKeyVaultResultOutput) EnabledForDiskEncryption

func (o LookupKeyVaultResultOutput) EnabledForDiskEncryption() pulumi.BoolOutput

Can Azure Disk Encryption retrieve secrets from the Key Vault?

func (LookupKeyVaultResultOutput) EnabledForTemplateDeployment

func (o LookupKeyVaultResultOutput) EnabledForTemplateDeployment() pulumi.BoolOutput

Can Azure Resource Manager retrieve secrets from the Key Vault?

func (LookupKeyVaultResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupKeyVaultResultOutput) Location

The Azure Region in which the Key Vault exists.

func (LookupKeyVaultResultOutput) Name

func (LookupKeyVaultResultOutput) NetworkAcls

func (LookupKeyVaultResultOutput) PublicNetworkAccessEnabled added in v5.16.0

func (o LookupKeyVaultResultOutput) PublicNetworkAccessEnabled() pulumi.BoolOutput

Is public network access enabled on this Key Vault?

func (LookupKeyVaultResultOutput) PurgeProtectionEnabled

func (o LookupKeyVaultResultOutput) PurgeProtectionEnabled() pulumi.BoolOutput

Is purge protection enabled on this Key Vault?

func (LookupKeyVaultResultOutput) ResourceGroupName

func (o LookupKeyVaultResultOutput) ResourceGroupName() pulumi.StringOutput

func (LookupKeyVaultResultOutput) SkuName

The Name of the SKU used for this Key Vault.

func (LookupKeyVaultResultOutput) Tags

A mapping of tags assigned to the Key Vault.

func (LookupKeyVaultResultOutput) TenantId

The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.

func (LookupKeyVaultResultOutput) ToLookupKeyVaultResultOutput

func (o LookupKeyVaultResultOutput) ToLookupKeyVaultResultOutput() LookupKeyVaultResultOutput

func (LookupKeyVaultResultOutput) ToLookupKeyVaultResultOutputWithContext

func (o LookupKeyVaultResultOutput) ToLookupKeyVaultResultOutputWithContext(ctx context.Context) LookupKeyVaultResultOutput

func (LookupKeyVaultResultOutput) VaultUri

The URI of the vault for performing operations on keys and secrets.

type LookupManagedHardwareSecurityModuleArgs

type LookupManagedHardwareSecurityModuleArgs struct {
	// The name of the Key Vault Managed Hardware Security Module.
	Name string `pulumi:"name"`
	// The name of the Resource Group in which the Key Vault Managed Hardware Security Module exists.
	ResourceGroupName string `pulumi:"resourceGroupName"`
}

A collection of arguments for invoking getManagedHardwareSecurityModule.

type LookupManagedHardwareSecurityModuleOutputArgs

type LookupManagedHardwareSecurityModuleOutputArgs struct {
	// The name of the Key Vault Managed Hardware Security Module.
	Name pulumi.StringInput `pulumi:"name"`
	// The name of the Resource Group in which the Key Vault Managed Hardware Security Module exists.
	ResourceGroupName pulumi.StringInput `pulumi:"resourceGroupName"`
}

A collection of arguments for invoking getManagedHardwareSecurityModule.

func (LookupManagedHardwareSecurityModuleOutputArgs) ElementType

type LookupManagedHardwareSecurityModuleResult

type LookupManagedHardwareSecurityModuleResult struct {
	// Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module.
	AdminObjectIds []string `pulumi:"adminObjectIds"`
	// The URI of the Hardware Security Module for performing operations on keys and secrets.
	HsmUri string `pulumi:"hsmUri"`
	// The provider-assigned unique ID for this managed resource.
	Id string `pulumi:"id"`
	// The Azure Region in which the Key Vault managed Hardware Security Module exists.
	Location string `pulumi:"location"`
	Name     string `pulumi:"name"`
	// Is purge protection enabled on this Key Vault Managed Hardware Security Module?
	PurgeProtectionEnabled bool   `pulumi:"purgeProtectionEnabled"`
	ResourceGroupName      string `pulumi:"resourceGroupName"`
	// The Name of the SKU used for this Key Vault Managed Hardware Security Module.
	SkuName string `pulumi:"skuName"`
	// The number of days that items should be retained for soft-deleted.
	SoftDeleteRetentionDays int `pulumi:"softDeleteRetentionDays"`
	// A mapping of tags assigned to the Key Vault Managed Hardware Security Module.
	Tags map[string]string `pulumi:"tags"`
	// The Azure Active Directory Tenant ID used for authenticating requests to the Key Vault Managed Hardware Security Module.
	TenantId string `pulumi:"tenantId"`
}

A collection of values returned by getManagedHardwareSecurityModule.

func LookupManagedHardwareSecurityModule

Use this data source to access information about an existing Key Vault Managed Hardware Security Module.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupManagedHardwareSecurityModule(ctx, &keyvault.LookupManagedHardwareSecurityModuleArgs{
			Name:              "mykeyvaultHsm",
			ResourceGroupName: "some-resource-group",
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("hsmUri", example.HsmUri)
		return nil
	})
}

```

type LookupManagedHardwareSecurityModuleResultOutput

type LookupManagedHardwareSecurityModuleResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getManagedHardwareSecurityModule.

func (LookupManagedHardwareSecurityModuleResultOutput) AdminObjectIds

Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module.

func (LookupManagedHardwareSecurityModuleResultOutput) ElementType

func (LookupManagedHardwareSecurityModuleResultOutput) HsmUri

The URI of the Hardware Security Module for performing operations on keys and secrets.

func (LookupManagedHardwareSecurityModuleResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupManagedHardwareSecurityModuleResultOutput) Location

The Azure Region in which the Key Vault managed Hardware Security Module exists.

func (LookupManagedHardwareSecurityModuleResultOutput) Name

func (LookupManagedHardwareSecurityModuleResultOutput) PurgeProtectionEnabled

Is purge protection enabled on this Key Vault Managed Hardware Security Module?

func (LookupManagedHardwareSecurityModuleResultOutput) ResourceGroupName

func (LookupManagedHardwareSecurityModuleResultOutput) SkuName

The Name of the SKU used for this Key Vault Managed Hardware Security Module.

func (LookupManagedHardwareSecurityModuleResultOutput) SoftDeleteRetentionDays

The number of days that items should be retained for soft-deleted.

func (LookupManagedHardwareSecurityModuleResultOutput) Tags

A mapping of tags assigned to the Key Vault Managed Hardware Security Module.

func (LookupManagedHardwareSecurityModuleResultOutput) TenantId

The Azure Active Directory Tenant ID used for authenticating requests to the Key Vault Managed Hardware Security Module.

func (LookupManagedHardwareSecurityModuleResultOutput) ToLookupManagedHardwareSecurityModuleResultOutput

func (o LookupManagedHardwareSecurityModuleResultOutput) ToLookupManagedHardwareSecurityModuleResultOutput() LookupManagedHardwareSecurityModuleResultOutput

func (LookupManagedHardwareSecurityModuleResultOutput) ToLookupManagedHardwareSecurityModuleResultOutputWithContext

func (o LookupManagedHardwareSecurityModuleResultOutput) ToLookupManagedHardwareSecurityModuleResultOutputWithContext(ctx context.Context) LookupManagedHardwareSecurityModuleResultOutput

type LookupManagedHardwareSecurityModuleRoleDefinitionArgs added in v5.59.0

type LookupManagedHardwareSecurityModuleRoleDefinitionArgs struct {
	// The name in UUID notation of this KeyVault Role Definition.
	Name string `pulumi:"name"`
	// Specify the base URL of the Managed HSM resource.
	VaultBaseUrl string `pulumi:"vaultBaseUrl"`
}

A collection of arguments for invoking getManagedHardwareSecurityModuleRoleDefinition.

type LookupManagedHardwareSecurityModuleRoleDefinitionOutputArgs added in v5.59.0

type LookupManagedHardwareSecurityModuleRoleDefinitionOutputArgs struct {
	// The name in UUID notation of this KeyVault Role Definition.
	Name pulumi.StringInput `pulumi:"name"`
	// Specify the base URL of the Managed HSM resource.
	VaultBaseUrl pulumi.StringInput `pulumi:"vaultBaseUrl"`
}

A collection of arguments for invoking getManagedHardwareSecurityModuleRoleDefinition.

func (LookupManagedHardwareSecurityModuleRoleDefinitionOutputArgs) ElementType added in v5.59.0

type LookupManagedHardwareSecurityModuleRoleDefinitionResult added in v5.59.0

type LookupManagedHardwareSecurityModuleRoleDefinitionResult struct {
	// A list of assignable role scope. Possible values are `/` and `/keys`.
	AssignableScopes []string `pulumi:"assignableScopes"`
	// A text description of this role definition.
	Description string `pulumi:"description"`
	// The provider-assigned unique ID for this managed resource.
	Id   string `pulumi:"id"`
	Name string `pulumi:"name"`
	// A `permission` block as defined below.
	Permissions []GetManagedHardwareSecurityModuleRoleDefinitionPermission `pulumi:"permissions"`
	// The ID of the role definition resource without base url.
	ResourceManagerId string `pulumi:"resourceManagerId"`
	// The role name of the role definition.
	RoleName string `pulumi:"roleName"`
	// The type of the role definition. Possible values are `AKVBuiltInRole` and `CustomRole`.
	RoleType     string `pulumi:"roleType"`
	VaultBaseUrl string `pulumi:"vaultBaseUrl"`
}

A collection of values returned by getManagedHardwareSecurityModuleRoleDefinition.

func LookupManagedHardwareSecurityModuleRoleDefinition added in v5.59.0

Use this data source to access information about an existing KeyVault Role Definition.

type LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput added in v5.59.0

type LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getManagedHardwareSecurityModuleRoleDefinition.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) AssignableScopes added in v5.59.0

A list of assignable role scope. Possible values are `/` and `/keys`.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) Description added in v5.59.0

A text description of this role definition.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) ElementType added in v5.59.0

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) Id added in v5.59.0

The provider-assigned unique ID for this managed resource.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) Name added in v5.59.0

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) Permissions added in v5.59.0

A `permission` block as defined below.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) ResourceManagerId added in v5.59.0

The ID of the role definition resource without base url.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) RoleName added in v5.59.0

The role name of the role definition.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) RoleType added in v5.59.0

The type of the role definition. Possible values are `AKVBuiltInRole` and `CustomRole`.

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) ToLookupManagedHardwareSecurityModuleRoleDefinitionResultOutput added in v5.59.0

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) ToLookupManagedHardwareSecurityModuleRoleDefinitionResultOutputWithContext added in v5.59.0

func (o LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) ToLookupManagedHardwareSecurityModuleRoleDefinitionResultOutputWithContext(ctx context.Context) LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput

func (LookupManagedHardwareSecurityModuleRoleDefinitionResultOutput) VaultBaseUrl added in v5.59.0

type LookupSecretArgs

type LookupSecretArgs struct {
	// Specifies the ID of the Key Vault instance to fetch secret names from, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId string `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Secret.
	Name string `pulumi:"name"`
	// Specifies the version of the Key Vault Secret. Defaults to the current version of the Key Vault Secret.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version *string `pulumi:"version"`
}

A collection of arguments for invoking getSecret.

type LookupSecretOutputArgs

type LookupSecretOutputArgs struct {
	// Specifies the ID of the Key Vault instance to fetch secret names from, available on the `keyvault.KeyVault` Data Source / Resource.
	KeyVaultId pulumi.StringInput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Secret.
	Name pulumi.StringInput `pulumi:"name"`
	// Specifies the version of the Key Vault Secret. Defaults to the current version of the Key Vault Secret.
	//
	// **NOTE:** The vault must be in the same subscription as the provider. If the vault is in another subscription, you must create an aliased provider for that subscription.
	Version pulumi.StringPtrInput `pulumi:"version"`
}

A collection of arguments for invoking getSecret.

func (LookupSecretOutputArgs) ElementType

func (LookupSecretOutputArgs) ElementType() reflect.Type

type LookupSecretResult

type LookupSecretResult struct {
	// The content type for the Key Vault Secret.
	ContentType string `pulumi:"contentType"`
	// The date and time at which the Key Vault Secret expires and is no longer valid.
	ExpirationDate string `pulumi:"expirationDate"`
	// The provider-assigned unique ID for this managed resource.
	Id         string `pulumi:"id"`
	KeyVaultId string `pulumi:"keyVaultId"`
	Name       string `pulumi:"name"`
	// The earliest date at which the Key Vault Secret can be used.
	NotBeforeDate string `pulumi:"notBeforeDate"`
	// The (Versioned) ID for this Key Vault Secret. This property points to a specific version of a Key Vault Secret, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId string `pulumi:"resourceId"`
	// The Versionless ID of the Key Vault Secret. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Secret is updated.
	ResourceVersionlessId string `pulumi:"resourceVersionlessId"`
	// Any tags assigned to this resource.
	Tags map[string]string `pulumi:"tags"`
	// The value of the Key Vault Secret.
	Value   string  `pulumi:"value"`
	Version *string `pulumi:"version"`
	// The Versionless ID of the Key Vault Secret. This can be used to always get latest secret value, and enable fetching automatically rotating secrets.
	VersionlessId string `pulumi:"versionlessId"`
}

A collection of values returned by getSecret.

func LookupSecret

func LookupSecret(ctx *pulumi.Context, args *LookupSecretArgs, opts ...pulumi.InvokeOption) (*LookupSecretResult, error)

Use this data source to access information about an existing Key Vault Secret.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := keyvault.LookupSecret(ctx, &keyvault.LookupSecretArgs{
			Name:       "secret-sauce",
			KeyVaultId: existing.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("secretValue", example.Value)
		return nil
	})
}

```

type LookupSecretResultOutput

type LookupSecretResultOutput struct{ *pulumi.OutputState }

A collection of values returned by getSecret.

func (LookupSecretResultOutput) ContentType

The content type for the Key Vault Secret.

func (LookupSecretResultOutput) ElementType

func (LookupSecretResultOutput) ElementType() reflect.Type

func (LookupSecretResultOutput) ExpirationDate added in v5.41.0

func (o LookupSecretResultOutput) ExpirationDate() pulumi.StringOutput

The date and time at which the Key Vault Secret expires and is no longer valid.

func (LookupSecretResultOutput) Id

The provider-assigned unique ID for this managed resource.

func (LookupSecretResultOutput) KeyVaultId

func (LookupSecretResultOutput) Name

func (LookupSecretResultOutput) NotBeforeDate added in v5.41.0

func (o LookupSecretResultOutput) NotBeforeDate() pulumi.StringOutput

The earliest date at which the Key Vault Secret can be used.

func (LookupSecretResultOutput) ResourceId added in v5.12.0

The (Versioned) ID for this Key Vault Secret. This property points to a specific version of a Key Vault Secret, as such using this won't auto-rotate values if used in other Azure Services.

func (LookupSecretResultOutput) ResourceVersionlessId added in v5.12.0

func (o LookupSecretResultOutput) ResourceVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Secret. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Secret is updated.

func (LookupSecretResultOutput) Tags

Any tags assigned to this resource.

func (LookupSecretResultOutput) ToLookupSecretResultOutput

func (o LookupSecretResultOutput) ToLookupSecretResultOutput() LookupSecretResultOutput

func (LookupSecretResultOutput) ToLookupSecretResultOutputWithContext

func (o LookupSecretResultOutput) ToLookupSecretResultOutputWithContext(ctx context.Context) LookupSecretResultOutput

func (LookupSecretResultOutput) Value

The value of the Key Vault Secret.

func (LookupSecretResultOutput) Version

func (LookupSecretResultOutput) VersionlessId

func (o LookupSecretResultOutput) VersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Secret. This can be used to always get latest secret value, and enable fetching automatically rotating secrets.

type ManagedHardwareSecurityModule

type ManagedHardwareSecurityModule struct {
	pulumi.CustomResourceState

	// Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	AdminObjectIds pulumi.StringArrayOutput `pulumi:"adminObjectIds"`
	// The URI of the Key Vault Managed Hardware Security Module, used for performing operations on keys.
	HsmUri pulumi.StringOutput `pulumi:"hsmUri"`
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringOutput `pulumi:"location"`
	// Specifies the name of the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// A `networkAcls` block as defined below.
	NetworkAcls ManagedHardwareSecurityModuleNetworkAclsOutput `pulumi:"networkAcls"`
	// Whether traffic from public networks is permitted. Defaults to `true`. Changing this forces a new resource to be created.
	PublicNetworkAccessEnabled pulumi.BoolPtrOutput `pulumi:"publicNetworkAccessEnabled"`
	// Is Purge Protection enabled for this Key Vault Managed Hardware Security Module? Changing this forces a new resource to be created.
	PurgeProtectionEnabled pulumi.BoolPtrOutput `pulumi:"purgeProtectionEnabled"`
	// The name of the resource group in which to create the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringOutput `pulumi:"resourceGroupName"`
	// This attribute can be used for disaster recovery or when creating another Managed HSM that shares the same security domain.
	SecurityDomainEncryptedData pulumi.StringOutput `pulumi:"securityDomainEncryptedData"`
	// A list of KeyVault certificates resource IDs (minimum of three and up to a maximum of 10) to activate this Managed HSM. More information see [activate-your-managed-hsm](https://learn.microsoft.com/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm)
	SecurityDomainKeyVaultCertificateIds pulumi.StringArrayOutput `pulumi:"securityDomainKeyVaultCertificateIds"`
	// Specifies the minimum number of shares required to decrypt the security domain for recovery. This is required when `securityDomainKeyVaultCertificateIds` is specified. Valid values are between 2 and 10.
	SecurityDomainQuorum pulumi.IntPtrOutput `pulumi:"securityDomainQuorum"`
	// The Name of the SKU used for this Key Vault Managed Hardware Security Module. Possible value is `Standard_B1`. Changing this forces a new resource to be created.
	SkuName pulumi.StringOutput `pulumi:"skuName"`
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` days. Defaults to `90`. Changing this forces a new resource to be created.
	SoftDeleteRetentionDays pulumi.IntPtrOutput `pulumi:"softDeleteRetentionDays"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The Azure Active Directory Tenant ID that should be used for authenticating requests to the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Key Vault Managed Hardware Security Module.

> **Note:** The Azure Provider includes a Feature Toggle which will purge a Key Vault Managed Hardware Security Module resource on destroy, rather than the default soft-delete. See `purgeSoftDeletedHardwareSecurityModulesOnDestroy` for more information.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewManagedHardwareSecurityModule(ctx, "example", &keyvault.ManagedHardwareSecurityModuleArgs{
			Name:                    pulumi.String("exampleKVHsm"),
			ResourceGroupName:       example.Name,
			Location:                example.Location,
			SkuName:                 pulumi.String("Standard_B1"),
			PurgeProtectionEnabled:  pulumi.Bool(false),
			SoftDeleteRetentionDays: pulumi.Int(90),
			TenantId:                pulumi.String(current.TenantId),
			AdminObjectIds: pulumi.StringArray{
				pulumi.String(current.ObjectId),
			},
			Tags: pulumi.StringMap{
				"Env": pulumi.String("Test"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Managed Hardware Security Module can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/managedHardwareSecurityModule:ManagedHardwareSecurityModule example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.KeyVault/managedHSMs/hsm1 ```

func GetManagedHardwareSecurityModule

func GetManagedHardwareSecurityModule(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedHardwareSecurityModuleState, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModule, error)

GetManagedHardwareSecurityModule gets an existing ManagedHardwareSecurityModule resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedHardwareSecurityModule

func NewManagedHardwareSecurityModule(ctx *pulumi.Context,
	name string, args *ManagedHardwareSecurityModuleArgs, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModule, error)

NewManagedHardwareSecurityModule registers a new resource with the given unique name, arguments, and options.

func (*ManagedHardwareSecurityModule) ElementType

func (*ManagedHardwareSecurityModule) ToManagedHardwareSecurityModuleOutput

func (i *ManagedHardwareSecurityModule) ToManagedHardwareSecurityModuleOutput() ManagedHardwareSecurityModuleOutput

func (*ManagedHardwareSecurityModule) ToManagedHardwareSecurityModuleOutputWithContext

func (i *ManagedHardwareSecurityModule) ToManagedHardwareSecurityModuleOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleOutput

type ManagedHardwareSecurityModuleArgs

type ManagedHardwareSecurityModuleArgs struct {
	// Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	AdminObjectIds pulumi.StringArrayInput
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringPtrInput
	// Specifies the name of the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A `networkAcls` block as defined below.
	NetworkAcls ManagedHardwareSecurityModuleNetworkAclsPtrInput
	// Whether traffic from public networks is permitted. Defaults to `true`. Changing this forces a new resource to be created.
	PublicNetworkAccessEnabled pulumi.BoolPtrInput
	// Is Purge Protection enabled for this Key Vault Managed Hardware Security Module? Changing this forces a new resource to be created.
	PurgeProtectionEnabled pulumi.BoolPtrInput
	// The name of the resource group in which to create the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringInput
	// A list of KeyVault certificates resource IDs (minimum of three and up to a maximum of 10) to activate this Managed HSM. More information see [activate-your-managed-hsm](https://learn.microsoft.com/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm)
	SecurityDomainKeyVaultCertificateIds pulumi.StringArrayInput
	// Specifies the minimum number of shares required to decrypt the security domain for recovery. This is required when `securityDomainKeyVaultCertificateIds` is specified. Valid values are between 2 and 10.
	SecurityDomainQuorum pulumi.IntPtrInput
	// The Name of the SKU used for this Key Vault Managed Hardware Security Module. Possible value is `Standard_B1`. Changing this forces a new resource to be created.
	SkuName pulumi.StringInput
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` days. Defaults to `90`. Changing this forces a new resource to be created.
	SoftDeleteRetentionDays pulumi.IntPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The Azure Active Directory Tenant ID that should be used for authenticating requests to the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	TenantId pulumi.StringInput
}

The set of arguments for constructing a ManagedHardwareSecurityModule resource.

func (ManagedHardwareSecurityModuleArgs) ElementType

type ManagedHardwareSecurityModuleArray

type ManagedHardwareSecurityModuleArray []ManagedHardwareSecurityModuleInput

func (ManagedHardwareSecurityModuleArray) ElementType

func (ManagedHardwareSecurityModuleArray) ToManagedHardwareSecurityModuleArrayOutput

func (i ManagedHardwareSecurityModuleArray) ToManagedHardwareSecurityModuleArrayOutput() ManagedHardwareSecurityModuleArrayOutput

func (ManagedHardwareSecurityModuleArray) ToManagedHardwareSecurityModuleArrayOutputWithContext

func (i ManagedHardwareSecurityModuleArray) ToManagedHardwareSecurityModuleArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleArrayOutput

type ManagedHardwareSecurityModuleArrayInput

type ManagedHardwareSecurityModuleArrayInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleArrayOutput() ManagedHardwareSecurityModuleArrayOutput
	ToManagedHardwareSecurityModuleArrayOutputWithContext(context.Context) ManagedHardwareSecurityModuleArrayOutput
}

ManagedHardwareSecurityModuleArrayInput is an input type that accepts ManagedHardwareSecurityModuleArray and ManagedHardwareSecurityModuleArrayOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleArrayInput` via:

ManagedHardwareSecurityModuleArray{ ManagedHardwareSecurityModuleArgs{...} }

type ManagedHardwareSecurityModuleArrayOutput

type ManagedHardwareSecurityModuleArrayOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleArrayOutput) ElementType

func (ManagedHardwareSecurityModuleArrayOutput) Index

func (ManagedHardwareSecurityModuleArrayOutput) ToManagedHardwareSecurityModuleArrayOutput

func (o ManagedHardwareSecurityModuleArrayOutput) ToManagedHardwareSecurityModuleArrayOutput() ManagedHardwareSecurityModuleArrayOutput

func (ManagedHardwareSecurityModuleArrayOutput) ToManagedHardwareSecurityModuleArrayOutputWithContext

func (o ManagedHardwareSecurityModuleArrayOutput) ToManagedHardwareSecurityModuleArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleArrayOutput

type ManagedHardwareSecurityModuleInput

type ManagedHardwareSecurityModuleInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleOutput() ManagedHardwareSecurityModuleOutput
	ToManagedHardwareSecurityModuleOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleOutput
}

type ManagedHardwareSecurityModuleMap

type ManagedHardwareSecurityModuleMap map[string]ManagedHardwareSecurityModuleInput

func (ManagedHardwareSecurityModuleMap) ElementType

func (ManagedHardwareSecurityModuleMap) ToManagedHardwareSecurityModuleMapOutput

func (i ManagedHardwareSecurityModuleMap) ToManagedHardwareSecurityModuleMapOutput() ManagedHardwareSecurityModuleMapOutput

func (ManagedHardwareSecurityModuleMap) ToManagedHardwareSecurityModuleMapOutputWithContext

func (i ManagedHardwareSecurityModuleMap) ToManagedHardwareSecurityModuleMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleMapOutput

type ManagedHardwareSecurityModuleMapInput

type ManagedHardwareSecurityModuleMapInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleMapOutput() ManagedHardwareSecurityModuleMapOutput
	ToManagedHardwareSecurityModuleMapOutputWithContext(context.Context) ManagedHardwareSecurityModuleMapOutput
}

ManagedHardwareSecurityModuleMapInput is an input type that accepts ManagedHardwareSecurityModuleMap and ManagedHardwareSecurityModuleMapOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleMapInput` via:

ManagedHardwareSecurityModuleMap{ "key": ManagedHardwareSecurityModuleArgs{...} }

type ManagedHardwareSecurityModuleMapOutput

type ManagedHardwareSecurityModuleMapOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleMapOutput) ElementType

func (ManagedHardwareSecurityModuleMapOutput) MapIndex

func (ManagedHardwareSecurityModuleMapOutput) ToManagedHardwareSecurityModuleMapOutput

func (o ManagedHardwareSecurityModuleMapOutput) ToManagedHardwareSecurityModuleMapOutput() ManagedHardwareSecurityModuleMapOutput

func (ManagedHardwareSecurityModuleMapOutput) ToManagedHardwareSecurityModuleMapOutputWithContext

func (o ManagedHardwareSecurityModuleMapOutput) ToManagedHardwareSecurityModuleMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleMapOutput

type ManagedHardwareSecurityModuleNetworkAcls added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAcls struct {
	// Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
	Bypass string `pulumi:"bypass"`
	// The Default Action to use. Possible values are `Allow` and `Deny`.
	DefaultAction string `pulumi:"defaultAction"`
}

type ManagedHardwareSecurityModuleNetworkAclsArgs added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAclsArgs struct {
	// Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.
	Bypass pulumi.StringInput `pulumi:"bypass"`
	// The Default Action to use. Possible values are `Allow` and `Deny`.
	DefaultAction pulumi.StringInput `pulumi:"defaultAction"`
}

func (ManagedHardwareSecurityModuleNetworkAclsArgs) ElementType added in v5.28.0

func (ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsOutput added in v5.28.0

func (i ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsOutput() ManagedHardwareSecurityModuleNetworkAclsOutput

func (ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsOutputWithContext added in v5.28.0

func (i ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleNetworkAclsOutput

func (ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput added in v5.28.0

func (i ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput() ManagedHardwareSecurityModuleNetworkAclsPtrOutput

func (ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext added in v5.28.0

func (i ManagedHardwareSecurityModuleNetworkAclsArgs) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleNetworkAclsPtrOutput

type ManagedHardwareSecurityModuleNetworkAclsInput added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAclsInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleNetworkAclsOutput() ManagedHardwareSecurityModuleNetworkAclsOutput
	ToManagedHardwareSecurityModuleNetworkAclsOutputWithContext(context.Context) ManagedHardwareSecurityModuleNetworkAclsOutput
}

ManagedHardwareSecurityModuleNetworkAclsInput is an input type that accepts ManagedHardwareSecurityModuleNetworkAclsArgs and ManagedHardwareSecurityModuleNetworkAclsOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleNetworkAclsInput` via:

ManagedHardwareSecurityModuleNetworkAclsArgs{...}

type ManagedHardwareSecurityModuleNetworkAclsOutput added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAclsOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleNetworkAclsOutput) Bypass added in v5.28.0

Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.

func (ManagedHardwareSecurityModuleNetworkAclsOutput) DefaultAction added in v5.28.0

The Default Action to use. Possible values are `Allow` and `Deny`.

func (ManagedHardwareSecurityModuleNetworkAclsOutput) ElementType added in v5.28.0

func (ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsOutput added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsOutput() ManagedHardwareSecurityModuleNetworkAclsOutput

func (ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsOutputWithContext added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleNetworkAclsOutput

func (ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput() ManagedHardwareSecurityModuleNetworkAclsPtrOutput

func (ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleNetworkAclsPtrOutput

type ManagedHardwareSecurityModuleNetworkAclsPtrInput added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAclsPtrInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleNetworkAclsPtrOutput() ManagedHardwareSecurityModuleNetworkAclsPtrOutput
	ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext(context.Context) ManagedHardwareSecurityModuleNetworkAclsPtrOutput
}

ManagedHardwareSecurityModuleNetworkAclsPtrInput is an input type that accepts ManagedHardwareSecurityModuleNetworkAclsArgs, ManagedHardwareSecurityModuleNetworkAclsPtr and ManagedHardwareSecurityModuleNetworkAclsPtrOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleNetworkAclsPtrInput` via:

        ManagedHardwareSecurityModuleNetworkAclsArgs{...}

or:

        nil

type ManagedHardwareSecurityModuleNetworkAclsPtrOutput added in v5.28.0

type ManagedHardwareSecurityModuleNetworkAclsPtrOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) Bypass added in v5.28.0

Specifies which traffic can bypass the network rules. Possible values are `AzureServices` and `None`.

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) DefaultAction added in v5.28.0

The Default Action to use. Possible values are `Allow` and `Deny`.

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) Elem added in v5.28.0

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) ElementType added in v5.28.0

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsPtrOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutput() ManagedHardwareSecurityModuleNetworkAclsPtrOutput

func (ManagedHardwareSecurityModuleNetworkAclsPtrOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext added in v5.28.0

func (o ManagedHardwareSecurityModuleNetworkAclsPtrOutput) ToManagedHardwareSecurityModuleNetworkAclsPtrOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleNetworkAclsPtrOutput

type ManagedHardwareSecurityModuleOutput

type ManagedHardwareSecurityModuleOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleOutput) AdminObjectIds added in v5.5.0

Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) ElementType

func (ManagedHardwareSecurityModuleOutput) HsmUri added in v5.5.0

The URI of the Key Vault Managed Hardware Security Module, used for performing operations on keys.

func (ManagedHardwareSecurityModuleOutput) Location added in v5.5.0

Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) Name added in v5.5.0

Specifies the name of the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) NetworkAcls added in v5.28.0

A `networkAcls` block as defined below.

func (ManagedHardwareSecurityModuleOutput) PublicNetworkAccessEnabled added in v5.28.0

func (o ManagedHardwareSecurityModuleOutput) PublicNetworkAccessEnabled() pulumi.BoolPtrOutput

Whether traffic from public networks is permitted. Defaults to `true`. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) PurgeProtectionEnabled added in v5.5.0

func (o ManagedHardwareSecurityModuleOutput) PurgeProtectionEnabled() pulumi.BoolPtrOutput

Is Purge Protection enabled for this Key Vault Managed Hardware Security Module? Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) ResourceGroupName added in v5.5.0

The name of the resource group in which to create the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) SecurityDomainEncryptedData added in v5.45.0

func (o ManagedHardwareSecurityModuleOutput) SecurityDomainEncryptedData() pulumi.StringOutput

This attribute can be used for disaster recovery or when creating another Managed HSM that shares the same security domain.

func (ManagedHardwareSecurityModuleOutput) SecurityDomainKeyVaultCertificateIds added in v5.45.0

func (o ManagedHardwareSecurityModuleOutput) SecurityDomainKeyVaultCertificateIds() pulumi.StringArrayOutput

A list of KeyVault certificates resource IDs (minimum of three and up to a maximum of 10) to activate this Managed HSM. More information see [activate-your-managed-hsm](https://learn.microsoft.com/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm)

func (ManagedHardwareSecurityModuleOutput) SecurityDomainQuorum added in v5.45.0

func (o ManagedHardwareSecurityModuleOutput) SecurityDomainQuorum() pulumi.IntPtrOutput

Specifies the minimum number of shares required to decrypt the security domain for recovery. This is required when `securityDomainKeyVaultCertificateIds` is specified. Valid values are between 2 and 10.

func (ManagedHardwareSecurityModuleOutput) SkuName added in v5.5.0

The Name of the SKU used for this Key Vault Managed Hardware Security Module. Possible value is `Standard_B1`. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) SoftDeleteRetentionDays added in v5.5.0

func (o ManagedHardwareSecurityModuleOutput) SoftDeleteRetentionDays() pulumi.IntPtrOutput

The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` days. Defaults to `90`. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) Tags added in v5.5.0

A mapping of tags to assign to the resource.

func (ManagedHardwareSecurityModuleOutput) TenantId added in v5.5.0

The Azure Active Directory Tenant ID that should be used for authenticating requests to the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.

func (ManagedHardwareSecurityModuleOutput) ToManagedHardwareSecurityModuleOutput

func (o ManagedHardwareSecurityModuleOutput) ToManagedHardwareSecurityModuleOutput() ManagedHardwareSecurityModuleOutput

func (ManagedHardwareSecurityModuleOutput) ToManagedHardwareSecurityModuleOutputWithContext

func (o ManagedHardwareSecurityModuleOutput) ToManagedHardwareSecurityModuleOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleOutput

type ManagedHardwareSecurityModuleRoleAssignment added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignment struct {
	pulumi.CustomResourceState

	// The name in GUID notation which should be used for this Managed Hardware Security Module Role Assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The principal ID to be assigned to this role. It can point to a user, service principal, or security group. Changing this forces a new Managed Hardware Security Module to be created.
	PrincipalId pulumi.StringOutput `pulumi:"principalId"`
	// The resource id of created assignment resource.
	ResourceId pulumi.StringOutput `pulumi:"resourceId"`
	// The resource ID of the role definition to assign. Changing this forces a new Managed Hardware Security Module to be created.
	RoleDefinitionId pulumi.StringOutput `pulumi:"roleDefinitionId"`
	// Specifies the scope to create the role assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Scope pulumi.StringOutput `pulumi:"scope"`
	// The HSM URI of a Managed Hardware Security Module resource. Changing this forces a new Managed Hardware Security Module to be created.
	VaultBaseUrl pulumi.StringOutput `pulumi:"vaultBaseUrl"`
}

Manages a Managed Hardware Security Module Role Assignment.

## Import

Managed Hardware Security Modules can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/managedHardwareSecurityModuleRoleAssignment:ManagedHardwareSecurityModuleRoleAssignment example https://0000.managedhsm.azure.net///RoleAssignment/00000000-0000-0000-0000-000000000000 ```

func GetManagedHardwareSecurityModuleRoleAssignment added in v5.59.0

func GetManagedHardwareSecurityModuleRoleAssignment(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedHardwareSecurityModuleRoleAssignmentState, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModuleRoleAssignment, error)

GetManagedHardwareSecurityModuleRoleAssignment gets an existing ManagedHardwareSecurityModuleRoleAssignment resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedHardwareSecurityModuleRoleAssignment added in v5.59.0

func NewManagedHardwareSecurityModuleRoleAssignment(ctx *pulumi.Context,
	name string, args *ManagedHardwareSecurityModuleRoleAssignmentArgs, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModuleRoleAssignment, error)

NewManagedHardwareSecurityModuleRoleAssignment registers a new resource with the given unique name, arguments, and options.

func (*ManagedHardwareSecurityModuleRoleAssignment) ElementType added in v5.59.0

func (*ManagedHardwareSecurityModuleRoleAssignment) ToManagedHardwareSecurityModuleRoleAssignmentOutput added in v5.59.0

func (i *ManagedHardwareSecurityModuleRoleAssignment) ToManagedHardwareSecurityModuleRoleAssignmentOutput() ManagedHardwareSecurityModuleRoleAssignmentOutput

func (*ManagedHardwareSecurityModuleRoleAssignment) ToManagedHardwareSecurityModuleRoleAssignmentOutputWithContext added in v5.59.0

func (i *ManagedHardwareSecurityModuleRoleAssignment) ToManagedHardwareSecurityModuleRoleAssignmentOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentOutput

type ManagedHardwareSecurityModuleRoleAssignmentArgs added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentArgs struct {
	// The name in GUID notation which should be used for this Managed Hardware Security Module Role Assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Name pulumi.StringPtrInput
	// The principal ID to be assigned to this role. It can point to a user, service principal, or security group. Changing this forces a new Managed Hardware Security Module to be created.
	PrincipalId pulumi.StringInput
	// The resource ID of the role definition to assign. Changing this forces a new Managed Hardware Security Module to be created.
	RoleDefinitionId pulumi.StringInput
	// Specifies the scope to create the role assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Scope pulumi.StringInput
	// The HSM URI of a Managed Hardware Security Module resource. Changing this forces a new Managed Hardware Security Module to be created.
	VaultBaseUrl pulumi.StringInput
}

The set of arguments for constructing a ManagedHardwareSecurityModuleRoleAssignment resource.

func (ManagedHardwareSecurityModuleRoleAssignmentArgs) ElementType added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentArray added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentArray []ManagedHardwareSecurityModuleRoleAssignmentInput

func (ManagedHardwareSecurityModuleRoleAssignmentArray) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentArray) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutput added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleAssignmentArray) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutput() ManagedHardwareSecurityModuleRoleAssignmentArrayOutput

func (ManagedHardwareSecurityModuleRoleAssignmentArray) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleAssignmentArray) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentArrayOutput

type ManagedHardwareSecurityModuleRoleAssignmentArrayInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentArrayInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleAssignmentArrayOutput() ManagedHardwareSecurityModuleRoleAssignmentArrayOutput
	ToManagedHardwareSecurityModuleRoleAssignmentArrayOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleAssignmentArrayOutput
}

ManagedHardwareSecurityModuleRoleAssignmentArrayInput is an input type that accepts ManagedHardwareSecurityModuleRoleAssignmentArray and ManagedHardwareSecurityModuleRoleAssignmentArrayOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleAssignmentArrayInput` via:

ManagedHardwareSecurityModuleRoleAssignmentArray{ ManagedHardwareSecurityModuleRoleAssignmentArgs{...} }

type ManagedHardwareSecurityModuleRoleAssignmentArrayOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentArrayOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleAssignmentArrayOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentArrayOutput) Index added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentArrayOutput) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentArrayOutput) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleAssignmentArrayOutput) ToManagedHardwareSecurityModuleRoleAssignmentArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentArrayOutput

type ManagedHardwareSecurityModuleRoleAssignmentInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleAssignmentOutput() ManagedHardwareSecurityModuleRoleAssignmentOutput
	ToManagedHardwareSecurityModuleRoleAssignmentOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentOutput
}

type ManagedHardwareSecurityModuleRoleAssignmentMap added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentMap map[string]ManagedHardwareSecurityModuleRoleAssignmentInput

func (ManagedHardwareSecurityModuleRoleAssignmentMap) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentMap) ToManagedHardwareSecurityModuleRoleAssignmentMapOutput added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleAssignmentMap) ToManagedHardwareSecurityModuleRoleAssignmentMapOutput() ManagedHardwareSecurityModuleRoleAssignmentMapOutput

func (ManagedHardwareSecurityModuleRoleAssignmentMap) ToManagedHardwareSecurityModuleRoleAssignmentMapOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleAssignmentMap) ToManagedHardwareSecurityModuleRoleAssignmentMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentMapOutput

type ManagedHardwareSecurityModuleRoleAssignmentMapInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentMapInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleAssignmentMapOutput() ManagedHardwareSecurityModuleRoleAssignmentMapOutput
	ToManagedHardwareSecurityModuleRoleAssignmentMapOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleAssignmentMapOutput
}

ManagedHardwareSecurityModuleRoleAssignmentMapInput is an input type that accepts ManagedHardwareSecurityModuleRoleAssignmentMap and ManagedHardwareSecurityModuleRoleAssignmentMapOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleAssignmentMapInput` via:

ManagedHardwareSecurityModuleRoleAssignmentMap{ "key": ManagedHardwareSecurityModuleRoleAssignmentArgs{...} }

type ManagedHardwareSecurityModuleRoleAssignmentMapOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentMapOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleAssignmentMapOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentMapOutput) MapIndex added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentMapOutput) ToManagedHardwareSecurityModuleRoleAssignmentMapOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentMapOutput) ToManagedHardwareSecurityModuleRoleAssignmentMapOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleAssignmentMapOutput) ToManagedHardwareSecurityModuleRoleAssignmentMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentMapOutput

type ManagedHardwareSecurityModuleRoleAssignmentOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) Name added in v5.59.0

The name in GUID notation which should be used for this Managed Hardware Security Module Role Assignment. Changing this forces a new Managed Hardware Security Module to be created.

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) PrincipalId added in v5.59.0

The principal ID to be assigned to this role. It can point to a user, service principal, or security group. Changing this forces a new Managed Hardware Security Module to be created.

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) ResourceId added in v5.59.0

The resource id of created assignment resource.

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) RoleDefinitionId added in v5.59.0

The resource ID of the role definition to assign. Changing this forces a new Managed Hardware Security Module to be created.

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) Scope added in v5.59.0

Specifies the scope to create the role assignment. Changing this forces a new Managed Hardware Security Module to be created.

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) ToManagedHardwareSecurityModuleRoleAssignmentOutput added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleAssignmentOutput) ToManagedHardwareSecurityModuleRoleAssignmentOutput() ManagedHardwareSecurityModuleRoleAssignmentOutput

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) ToManagedHardwareSecurityModuleRoleAssignmentOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleAssignmentOutput) ToManagedHardwareSecurityModuleRoleAssignmentOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleAssignmentOutput

func (ManagedHardwareSecurityModuleRoleAssignmentOutput) VaultBaseUrl added in v5.59.0

The HSM URI of a Managed Hardware Security Module resource. Changing this forces a new Managed Hardware Security Module to be created.

type ManagedHardwareSecurityModuleRoleAssignmentState added in v5.59.0

type ManagedHardwareSecurityModuleRoleAssignmentState struct {
	// The name in GUID notation which should be used for this Managed Hardware Security Module Role Assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Name pulumi.StringPtrInput
	// The principal ID to be assigned to this role. It can point to a user, service principal, or security group. Changing this forces a new Managed Hardware Security Module to be created.
	PrincipalId pulumi.StringPtrInput
	// The resource id of created assignment resource.
	ResourceId pulumi.StringPtrInput
	// The resource ID of the role definition to assign. Changing this forces a new Managed Hardware Security Module to be created.
	RoleDefinitionId pulumi.StringPtrInput
	// Specifies the scope to create the role assignment. Changing this forces a new Managed Hardware Security Module to be created.
	Scope pulumi.StringPtrInput
	// The HSM URI of a Managed Hardware Security Module resource. Changing this forces a new Managed Hardware Security Module to be created.
	VaultBaseUrl pulumi.StringPtrInput
}

func (ManagedHardwareSecurityModuleRoleAssignmentState) ElementType added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinition added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinition struct {
	pulumi.CustomResourceState

	// Specifies a text description about this KeyVault Role Definition.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The name which should be used for this KeyVault Role Definition. Changing this forces a new KeyVault Role Definition to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// One or more `permission` blocks as defined below.
	Permissions ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput `pulumi:"permissions"`
	// The ID of the role definition resource without Key Vault base URL.
	ResourceManagerId pulumi.StringOutput `pulumi:"resourceManagerId"`
	// Specify a name for this KeyVault Role Definition.
	RoleName pulumi.StringPtrOutput `pulumi:"roleName"`
	// The type of the role definition. Possible values are `AKVBuiltInRole` and `CustomRole`.
	RoleType pulumi.StringOutput `pulumi:"roleType"`
	// The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.
	VaultBaseUrl pulumi.StringOutput `pulumi:"vaultBaseUrl"`
}

Manages a KeyVault Managed Hardware Security Module Role Definition. This resource works together with Managed hardware security module resource.

## Import

KeyVaults can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/managedHardwareSecurityModuleRoleDefinition:ManagedHardwareSecurityModuleRoleDefinition example https://0000.managedhsm.azure.net///RoleDefinition/00000000-0000-0000-0000-000000000000 ```

func GetManagedHardwareSecurityModuleRoleDefinition added in v5.59.0

func GetManagedHardwareSecurityModuleRoleDefinition(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedHardwareSecurityModuleRoleDefinitionState, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModuleRoleDefinition, error)

GetManagedHardwareSecurityModuleRoleDefinition gets an existing ManagedHardwareSecurityModuleRoleDefinition resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedHardwareSecurityModuleRoleDefinition added in v5.59.0

func NewManagedHardwareSecurityModuleRoleDefinition(ctx *pulumi.Context,
	name string, args *ManagedHardwareSecurityModuleRoleDefinitionArgs, opts ...pulumi.ResourceOption) (*ManagedHardwareSecurityModuleRoleDefinition, error)

NewManagedHardwareSecurityModuleRoleDefinition registers a new resource with the given unique name, arguments, and options.

func (*ManagedHardwareSecurityModuleRoleDefinition) ElementType added in v5.59.0

func (*ManagedHardwareSecurityModuleRoleDefinition) ToManagedHardwareSecurityModuleRoleDefinitionOutput added in v5.59.0

func (i *ManagedHardwareSecurityModuleRoleDefinition) ToManagedHardwareSecurityModuleRoleDefinitionOutput() ManagedHardwareSecurityModuleRoleDefinitionOutput

func (*ManagedHardwareSecurityModuleRoleDefinition) ToManagedHardwareSecurityModuleRoleDefinitionOutputWithContext added in v5.59.0

func (i *ManagedHardwareSecurityModuleRoleDefinition) ToManagedHardwareSecurityModuleRoleDefinitionOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionOutput

type ManagedHardwareSecurityModuleRoleDefinitionArgs added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionArgs struct {
	// Specifies a text description about this KeyVault Role Definition.
	Description pulumi.StringPtrInput
	// The name which should be used for this KeyVault Role Definition. Changing this forces a new KeyVault Role Definition to be created.
	Name pulumi.StringPtrInput
	// One or more `permission` blocks as defined below.
	Permissions ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput
	// Specify a name for this KeyVault Role Definition.
	RoleName pulumi.StringPtrInput
	// The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.
	VaultBaseUrl pulumi.StringInput
}

The set of arguments for constructing a ManagedHardwareSecurityModuleRoleDefinition resource.

func (ManagedHardwareSecurityModuleRoleDefinitionArgs) ElementType added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionArray added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionArray []ManagedHardwareSecurityModuleRoleDefinitionInput

func (ManagedHardwareSecurityModuleRoleDefinitionArray) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionArray) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutput added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionArray) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutput() ManagedHardwareSecurityModuleRoleDefinitionArrayOutput

func (ManagedHardwareSecurityModuleRoleDefinitionArray) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionArray) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionArrayOutput

type ManagedHardwareSecurityModuleRoleDefinitionArrayInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionArrayInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleDefinitionArrayOutput() ManagedHardwareSecurityModuleRoleDefinitionArrayOutput
	ToManagedHardwareSecurityModuleRoleDefinitionArrayOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleDefinitionArrayOutput
}

ManagedHardwareSecurityModuleRoleDefinitionArrayInput is an input type that accepts ManagedHardwareSecurityModuleRoleDefinitionArray and ManagedHardwareSecurityModuleRoleDefinitionArrayOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleDefinitionArrayInput` via:

ManagedHardwareSecurityModuleRoleDefinitionArray{ ManagedHardwareSecurityModuleRoleDefinitionArgs{...} }

type ManagedHardwareSecurityModuleRoleDefinitionArrayOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionArrayOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleDefinitionArrayOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionArrayOutput) Index added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionArrayOutput

type ManagedHardwareSecurityModuleRoleDefinitionInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleDefinitionOutput() ManagedHardwareSecurityModuleRoleDefinitionOutput
	ToManagedHardwareSecurityModuleRoleDefinitionOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionOutput
}

type ManagedHardwareSecurityModuleRoleDefinitionMap added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionMap map[string]ManagedHardwareSecurityModuleRoleDefinitionInput

func (ManagedHardwareSecurityModuleRoleDefinitionMap) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionMap) ToManagedHardwareSecurityModuleRoleDefinitionMapOutput added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionMap) ToManagedHardwareSecurityModuleRoleDefinitionMapOutput() ManagedHardwareSecurityModuleRoleDefinitionMapOutput

func (ManagedHardwareSecurityModuleRoleDefinitionMap) ToManagedHardwareSecurityModuleRoleDefinitionMapOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionMap) ToManagedHardwareSecurityModuleRoleDefinitionMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionMapOutput

type ManagedHardwareSecurityModuleRoleDefinitionMapInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionMapInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleDefinitionMapOutput() ManagedHardwareSecurityModuleRoleDefinitionMapOutput
	ToManagedHardwareSecurityModuleRoleDefinitionMapOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleDefinitionMapOutput
}

ManagedHardwareSecurityModuleRoleDefinitionMapInput is an input type that accepts ManagedHardwareSecurityModuleRoleDefinitionMap and ManagedHardwareSecurityModuleRoleDefinitionMapOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleDefinitionMapInput` via:

ManagedHardwareSecurityModuleRoleDefinitionMap{ "key": ManagedHardwareSecurityModuleRoleDefinitionArgs{...} }

type ManagedHardwareSecurityModuleRoleDefinitionMapOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionMapOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleDefinitionMapOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionMapOutput) MapIndex added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionMapOutput) ToManagedHardwareSecurityModuleRoleDefinitionMapOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionMapOutput) ToManagedHardwareSecurityModuleRoleDefinitionMapOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionMapOutput) ToManagedHardwareSecurityModuleRoleDefinitionMapOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionMapOutput

type ManagedHardwareSecurityModuleRoleDefinitionOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) Description added in v5.59.0

Specifies a text description about this KeyVault Role Definition.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) Name added in v5.59.0

The name which should be used for this KeyVault Role Definition. Changing this forces a new KeyVault Role Definition to be created.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) Permissions added in v5.59.0

One or more `permission` blocks as defined below.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) ResourceManagerId added in v5.59.0

The ID of the role definition resource without Key Vault base URL.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) RoleName added in v5.59.0

Specify a name for this KeyVault Role Definition.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) RoleType added in v5.59.0

The type of the role definition. Possible values are `AKVBuiltInRole` and `CustomRole`.

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) ToManagedHardwareSecurityModuleRoleDefinitionOutput added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionOutput) ToManagedHardwareSecurityModuleRoleDefinitionOutput() ManagedHardwareSecurityModuleRoleDefinitionOutput

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) ToManagedHardwareSecurityModuleRoleDefinitionOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionOutput) ToManagedHardwareSecurityModuleRoleDefinitionOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionOutput

func (ManagedHardwareSecurityModuleRoleDefinitionOutput) VaultBaseUrl added in v5.59.0

The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.

type ManagedHardwareSecurityModuleRoleDefinitionPermission added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermission struct {
	// One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
	Actions []string `pulumi:"actions"`
	// Specifies a list of data action permission to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
	DataActions []string `pulumi:"dataActions"`
	// One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
	NotActions []string `pulumi:"notActions"`
	// Specifies a list of data action permission not to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
	NotDataActions []string `pulumi:"notDataActions"`
}

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs struct {
	// One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
	Actions pulumi.StringArrayInput `pulumi:"actions"`
	// Specifies a list of data action permission to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
	DataActions pulumi.StringArrayInput `pulumi:"dataActions"`
	// One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.
	NotActions pulumi.StringArrayInput `pulumi:"notActions"`
	// Specifies a list of data action permission not to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.
	NotDataActions pulumi.StringArrayInput `pulumi:"notDataActions"`
}

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArray added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArray []ManagedHardwareSecurityModuleRoleDefinitionPermissionInput

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext added in v5.59.0

func (i ManagedHardwareSecurityModuleRoleDefinitionPermissionArray) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput() ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput
	ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput
}

ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput is an input type that accepts ManagedHardwareSecurityModuleRoleDefinitionPermissionArray and ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput` via:

ManagedHardwareSecurityModuleRoleDefinitionPermissionArray{ ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs{...} }

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) Index added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayOutput

type ManagedHardwareSecurityModuleRoleDefinitionPermissionInput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionInput interface {
	pulumi.Input

	ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutput() ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput
	ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput
}

ManagedHardwareSecurityModuleRoleDefinitionPermissionInput is an input type that accepts ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs and ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput values. You can construct a concrete instance of `ManagedHardwareSecurityModuleRoleDefinitionPermissionInput` via:

ManagedHardwareSecurityModuleRoleDefinitionPermissionArgs{...}

type ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput struct{ *pulumi.OutputState }

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) Actions added in v5.59.0

One or more Allowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) DataActions added in v5.59.0

Specifies a list of data action permission to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ElementType added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) NotActions added in v5.59.0

One or more Disallowed Actions, such as `*`, `Microsoft.Resources/subscriptions/resourceGroups/read`. See ['Azure Resource Manager resource provider operations'](https://docs.microsoft.com/azure/role-based-access-control/resource-provider-operations) for details.

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) NotDataActions added in v5.59.0

Specifies a list of data action permission not to grant. Possible values are `Microsoft.KeyVault/managedHsm/keys/read/action`, `Microsoft.KeyVault/managedHsm/keys/write/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/read/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/recover/action`, `Microsoft.KeyVault/managedHsm/keys/backup/action`, `Microsoft.KeyVault/managedHsm/keys/restore/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/delete/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/read/action`, `Microsoft.KeyVault/managedHsm/roleAssignments/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/read/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/write/action`, `Microsoft.KeyVault/managedHsm/roleDefinitions/delete/action`, `Microsoft.KeyVault/managedHsm/keys/encrypt/action`, `Microsoft.KeyVault/managedHsm/keys/decrypt/action`, `Microsoft.KeyVault/managedHsm/keys/wrap/action`, `Microsoft.KeyVault/managedHsm/keys/unwrap/action`, `Microsoft.KeyVault/managedHsm/keys/sign/action`, `Microsoft.KeyVault/managedHsm/keys/verify/action`, `Microsoft.KeyVault/managedHsm/keys/create`, `Microsoft.KeyVault/managedHsm/keys/delete`, `Microsoft.KeyVault/managedHsm/keys/export/action`, `Microsoft.KeyVault/managedHsm/keys/release/action`, `Microsoft.KeyVault/managedHsm/keys/import/action`, `Microsoft.KeyVault/managedHsm/keys/deletedKeys/delete`, `Microsoft.KeyVault/managedHsm/securitydomain/download/action`, `Microsoft.KeyVault/managedHsm/securitydomain/download/read`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/action`, `Microsoft.KeyVault/managedHsm/securitydomain/upload/read`, `Microsoft.KeyVault/managedHsm/securitydomain/transferkey/read`, `Microsoft.KeyVault/managedHsm/backup/start/action`, `Microsoft.KeyVault/managedHsm/restore/start/action`, `Microsoft.KeyVault/managedHsm/backup/status/action`, `Microsoft.KeyVault/managedHsm/restore/status/action` and `Microsoft.KeyVault/managedHsm/rng/action`.

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutput added in v5.59.0

func (ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext added in v5.59.0

func (o ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput) ToManagedHardwareSecurityModuleRoleDefinitionPermissionOutputWithContext(ctx context.Context) ManagedHardwareSecurityModuleRoleDefinitionPermissionOutput

type ManagedHardwareSecurityModuleRoleDefinitionState added in v5.59.0

type ManagedHardwareSecurityModuleRoleDefinitionState struct {
	// Specifies a text description about this KeyVault Role Definition.
	Description pulumi.StringPtrInput
	// The name which should be used for this KeyVault Role Definition. Changing this forces a new KeyVault Role Definition to be created.
	Name pulumi.StringPtrInput
	// One or more `permission` blocks as defined below.
	Permissions ManagedHardwareSecurityModuleRoleDefinitionPermissionArrayInput
	// The ID of the role definition resource without Key Vault base URL.
	ResourceManagerId pulumi.StringPtrInput
	// Specify a name for this KeyVault Role Definition.
	RoleName pulumi.StringPtrInput
	// The type of the role definition. Possible values are `AKVBuiltInRole` and `CustomRole`.
	RoleType pulumi.StringPtrInput
	// The base URL of the managed hardware security module resource. Changing this forces a new KeyVault Role Definition to be created.
	VaultBaseUrl pulumi.StringPtrInput
}

func (ManagedHardwareSecurityModuleRoleDefinitionState) ElementType added in v5.59.0

type ManagedHardwareSecurityModuleState

type ManagedHardwareSecurityModuleState struct {
	// Specifies a list of administrators object IDs for the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	AdminObjectIds pulumi.StringArrayInput
	// The URI of the Key Vault Managed Hardware Security Module, used for performing operations on keys.
	HsmUri pulumi.StringPtrInput
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringPtrInput
	// Specifies the name of the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A `networkAcls` block as defined below.
	NetworkAcls ManagedHardwareSecurityModuleNetworkAclsPtrInput
	// Whether traffic from public networks is permitted. Defaults to `true`. Changing this forces a new resource to be created.
	PublicNetworkAccessEnabled pulumi.BoolPtrInput
	// Is Purge Protection enabled for this Key Vault Managed Hardware Security Module? Changing this forces a new resource to be created.
	PurgeProtectionEnabled pulumi.BoolPtrInput
	// The name of the resource group in which to create the Key Vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringPtrInput
	// This attribute can be used for disaster recovery or when creating another Managed HSM that shares the same security domain.
	SecurityDomainEncryptedData pulumi.StringPtrInput
	// A list of KeyVault certificates resource IDs (minimum of three and up to a maximum of 10) to activate this Managed HSM. More information see [activate-your-managed-hsm](https://learn.microsoft.com/azure/key-vault/managed-hsm/quick-create-cli#activate-your-managed-hsm)
	SecurityDomainKeyVaultCertificateIds pulumi.StringArrayInput
	// Specifies the minimum number of shares required to decrypt the security domain for recovery. This is required when `securityDomainKeyVaultCertificateIds` is specified. Valid values are between 2 and 10.
	SecurityDomainQuorum pulumi.IntPtrInput
	// The Name of the SKU used for this Key Vault Managed Hardware Security Module. Possible value is `Standard_B1`. Changing this forces a new resource to be created.
	SkuName pulumi.StringPtrInput
	// The number of days that items should be retained for once soft-deleted. This value can be between `7` and `90` days. Defaults to `90`. Changing this forces a new resource to be created.
	SoftDeleteRetentionDays pulumi.IntPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The Azure Active Directory Tenant ID that should be used for authenticating requests to the key vault Managed Hardware Security Module. Changing this forces a new resource to be created.
	TenantId pulumi.StringPtrInput
}

func (ManagedHardwareSecurityModuleState) ElementType

type ManagedStorageAccount

type ManagedStorageAccount struct {
	pulumi.CustomResourceState

	// The ID of the Key Vault where the Managed Storage Account should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The name which should be used for this Key Vault Managed Storage Account. Changing this forces a new Key Vault Managed Storage Account to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// Should Storage Account access key be regenerated periodically?
	//
	// > **NOTE:** Azure Key Vault application needs to have access to Storage Account for auto regeneration to work. Example can be found above.
	RegenerateKeyAutomatically pulumi.BoolPtrOutput `pulumi:"regenerateKeyAutomatically"`
	// How often Storage Account access key should be regenerated. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	RegenerationPeriod pulumi.StringPtrOutput `pulumi:"regenerationPeriod"`
	// The ID of the Storage Account.
	StorageAccountId pulumi.StringOutput `pulumi:"storageAccountId"`
	// Which Storage Account access key that is managed by Key Vault. Possible values are `key1` and `key2`.
	StorageAccountKey pulumi.StringOutput `pulumi:"storageAccountKey"`
	// A mapping of tags which should be assigned to the Key Vault Managed Storage Account. Changing this forces a new resource to be created.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
}

Manages a Key Vault Managed Storage Account.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/storage"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
			Name:                   pulumi.String("storageaccountname"),
			ResourceGroupName:      example.Name,
			Location:               example.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("keyvaultname"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("standard"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("Delete"),
					},
					StoragePermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Set"),
						pulumi.String("SetSAS"),
						pulumi.String("GetSAS"),
						pulumi.String("DeleteSAS"),
						pulumi.String("Update"),
						pulumi.String("RegenerateKey"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewManagedStorageAccount(ctx, "example", &keyvault.ManagedStorageAccountArgs{
			Name:                       pulumi.String("examplemanagedstorage"),
			KeyVaultId:                 exampleKeyVault.ID(),
			StorageAccountId:           exampleAccount.ID(),
			StorageAccountKey:          pulumi.String("key1"),
			RegenerateKeyAutomatically: pulumi.Bool(false),
			RegenerationPeriod:         pulumi.String("P1D"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

### Automatically Regenerate Storage Account Access Key)

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/authorization"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/storage"
"github.com/pulumi/pulumi-azuread/sdk/v5/go/azuread"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		test, err := azuread.LookupServicePrincipal(ctx, &azuread.LookupServicePrincipalArgs{
			ApplicationId: pulumi.StringRef("cfa8b339-82a2-471a-a3c9-0fc0be7a4093"),
		}, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
			Name:                   pulumi.String("storageaccountname"),
			ResourceGroupName:      example.Name,
			Location:               example.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("keyvaultname"),
			Location:          example.Location,
			ResourceGroupName: example.Name,
			TenantId:          pulumi.String(current.TenantId),
			SkuName:           pulumi.String("standard"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("Delete"),
					},
					StoragePermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Set"),
						pulumi.String("SetSAS"),
						pulumi.String("GetSAS"),
						pulumi.String("DeleteSAS"),
						pulumi.String("Update"),
						pulumi.String("RegenerateKey"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = authorization.NewAssignment(ctx, "example", &authorization.AssignmentArgs{
			Scope:              exampleAccount.ID(),
			RoleDefinitionName: pulumi.String("Storage Account Key Operator Service Role"),
			PrincipalId:        pulumi.String(test.Id),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewManagedStorageAccount(ctx, "example", &keyvault.ManagedStorageAccountArgs{
			Name:                       pulumi.String("examplemanagedstorage"),
			KeyVaultId:                 exampleKeyVault.ID(),
			StorageAccountId:           exampleAccount.ID(),
			StorageAccountKey:          pulumi.String("key1"),
			RegenerateKeyAutomatically: pulumi.Bool(true),
			RegenerationPeriod:         pulumi.String("P1D"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Managed Storage Accounts can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/managedStorageAccount:ManagedStorageAccount example https://example-keyvault.vault.azure.net/storage/exampleStorageAcc01 ```

func GetManagedStorageAccount

func GetManagedStorageAccount(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedStorageAccountState, opts ...pulumi.ResourceOption) (*ManagedStorageAccount, error)

GetManagedStorageAccount gets an existing ManagedStorageAccount resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedStorageAccount

func NewManagedStorageAccount(ctx *pulumi.Context,
	name string, args *ManagedStorageAccountArgs, opts ...pulumi.ResourceOption) (*ManagedStorageAccount, error)

NewManagedStorageAccount registers a new resource with the given unique name, arguments, and options.

func (*ManagedStorageAccount) ElementType

func (*ManagedStorageAccount) ElementType() reflect.Type

func (*ManagedStorageAccount) ToManagedStorageAccountOutput

func (i *ManagedStorageAccount) ToManagedStorageAccountOutput() ManagedStorageAccountOutput

func (*ManagedStorageAccount) ToManagedStorageAccountOutputWithContext

func (i *ManagedStorageAccount) ToManagedStorageAccountOutputWithContext(ctx context.Context) ManagedStorageAccountOutput

type ManagedStorageAccountArgs

type ManagedStorageAccountArgs struct {
	// The ID of the Key Vault where the Managed Storage Account should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// The name which should be used for this Key Vault Managed Storage Account. Changing this forces a new Key Vault Managed Storage Account to be created.
	Name pulumi.StringPtrInput
	// Should Storage Account access key be regenerated periodically?
	//
	// > **NOTE:** Azure Key Vault application needs to have access to Storage Account for auto regeneration to work. Example can be found above.
	RegenerateKeyAutomatically pulumi.BoolPtrInput
	// How often Storage Account access key should be regenerated. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	RegenerationPeriod pulumi.StringPtrInput
	// The ID of the Storage Account.
	StorageAccountId pulumi.StringInput
	// Which Storage Account access key that is managed by Key Vault. Possible values are `key1` and `key2`.
	StorageAccountKey pulumi.StringInput
	// A mapping of tags which should be assigned to the Key Vault Managed Storage Account. Changing this forces a new resource to be created.
	Tags pulumi.StringMapInput
}

The set of arguments for constructing a ManagedStorageAccount resource.

func (ManagedStorageAccountArgs) ElementType

func (ManagedStorageAccountArgs) ElementType() reflect.Type

type ManagedStorageAccountArray

type ManagedStorageAccountArray []ManagedStorageAccountInput

func (ManagedStorageAccountArray) ElementType

func (ManagedStorageAccountArray) ElementType() reflect.Type

func (ManagedStorageAccountArray) ToManagedStorageAccountArrayOutput

func (i ManagedStorageAccountArray) ToManagedStorageAccountArrayOutput() ManagedStorageAccountArrayOutput

func (ManagedStorageAccountArray) ToManagedStorageAccountArrayOutputWithContext

func (i ManagedStorageAccountArray) ToManagedStorageAccountArrayOutputWithContext(ctx context.Context) ManagedStorageAccountArrayOutput

type ManagedStorageAccountArrayInput

type ManagedStorageAccountArrayInput interface {
	pulumi.Input

	ToManagedStorageAccountArrayOutput() ManagedStorageAccountArrayOutput
	ToManagedStorageAccountArrayOutputWithContext(context.Context) ManagedStorageAccountArrayOutput
}

ManagedStorageAccountArrayInput is an input type that accepts ManagedStorageAccountArray and ManagedStorageAccountArrayOutput values. You can construct a concrete instance of `ManagedStorageAccountArrayInput` via:

ManagedStorageAccountArray{ ManagedStorageAccountArgs{...} }

type ManagedStorageAccountArrayOutput

type ManagedStorageAccountArrayOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountArrayOutput) ElementType

func (ManagedStorageAccountArrayOutput) Index

func (ManagedStorageAccountArrayOutput) ToManagedStorageAccountArrayOutput

func (o ManagedStorageAccountArrayOutput) ToManagedStorageAccountArrayOutput() ManagedStorageAccountArrayOutput

func (ManagedStorageAccountArrayOutput) ToManagedStorageAccountArrayOutputWithContext

func (o ManagedStorageAccountArrayOutput) ToManagedStorageAccountArrayOutputWithContext(ctx context.Context) ManagedStorageAccountArrayOutput

type ManagedStorageAccountInput

type ManagedStorageAccountInput interface {
	pulumi.Input

	ToManagedStorageAccountOutput() ManagedStorageAccountOutput
	ToManagedStorageAccountOutputWithContext(ctx context.Context) ManagedStorageAccountOutput
}

type ManagedStorageAccountMap

type ManagedStorageAccountMap map[string]ManagedStorageAccountInput

func (ManagedStorageAccountMap) ElementType

func (ManagedStorageAccountMap) ElementType() reflect.Type

func (ManagedStorageAccountMap) ToManagedStorageAccountMapOutput

func (i ManagedStorageAccountMap) ToManagedStorageAccountMapOutput() ManagedStorageAccountMapOutput

func (ManagedStorageAccountMap) ToManagedStorageAccountMapOutputWithContext

func (i ManagedStorageAccountMap) ToManagedStorageAccountMapOutputWithContext(ctx context.Context) ManagedStorageAccountMapOutput

type ManagedStorageAccountMapInput

type ManagedStorageAccountMapInput interface {
	pulumi.Input

	ToManagedStorageAccountMapOutput() ManagedStorageAccountMapOutput
	ToManagedStorageAccountMapOutputWithContext(context.Context) ManagedStorageAccountMapOutput
}

ManagedStorageAccountMapInput is an input type that accepts ManagedStorageAccountMap and ManagedStorageAccountMapOutput values. You can construct a concrete instance of `ManagedStorageAccountMapInput` via:

ManagedStorageAccountMap{ "key": ManagedStorageAccountArgs{...} }

type ManagedStorageAccountMapOutput

type ManagedStorageAccountMapOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountMapOutput) ElementType

func (ManagedStorageAccountMapOutput) MapIndex

func (ManagedStorageAccountMapOutput) ToManagedStorageAccountMapOutput

func (o ManagedStorageAccountMapOutput) ToManagedStorageAccountMapOutput() ManagedStorageAccountMapOutput

func (ManagedStorageAccountMapOutput) ToManagedStorageAccountMapOutputWithContext

func (o ManagedStorageAccountMapOutput) ToManagedStorageAccountMapOutputWithContext(ctx context.Context) ManagedStorageAccountMapOutput

type ManagedStorageAccountOutput

type ManagedStorageAccountOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountOutput) ElementType

func (ManagedStorageAccountOutput) KeyVaultId added in v5.5.0

The ID of the Key Vault where the Managed Storage Account should be created. Changing this forces a new resource to be created.

func (ManagedStorageAccountOutput) Name added in v5.5.0

The name which should be used for this Key Vault Managed Storage Account. Changing this forces a new Key Vault Managed Storage Account to be created.

func (ManagedStorageAccountOutput) RegenerateKeyAutomatically added in v5.5.0

func (o ManagedStorageAccountOutput) RegenerateKeyAutomatically() pulumi.BoolPtrOutput

Should Storage Account access key be regenerated periodically?

> **NOTE:** Azure Key Vault application needs to have access to Storage Account for auto regeneration to work. Example can be found above.

func (ManagedStorageAccountOutput) RegenerationPeriod added in v5.5.0

func (o ManagedStorageAccountOutput) RegenerationPeriod() pulumi.StringPtrOutput

How often Storage Account access key should be regenerated. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).

func (ManagedStorageAccountOutput) StorageAccountId added in v5.5.0

func (o ManagedStorageAccountOutput) StorageAccountId() pulumi.StringOutput

The ID of the Storage Account.

func (ManagedStorageAccountOutput) StorageAccountKey added in v5.5.0

func (o ManagedStorageAccountOutput) StorageAccountKey() pulumi.StringOutput

Which Storage Account access key that is managed by Key Vault. Possible values are `key1` and `key2`.

func (ManagedStorageAccountOutput) Tags added in v5.5.0

A mapping of tags which should be assigned to the Key Vault Managed Storage Account. Changing this forces a new resource to be created.

func (ManagedStorageAccountOutput) ToManagedStorageAccountOutput

func (o ManagedStorageAccountOutput) ToManagedStorageAccountOutput() ManagedStorageAccountOutput

func (ManagedStorageAccountOutput) ToManagedStorageAccountOutputWithContext

func (o ManagedStorageAccountOutput) ToManagedStorageAccountOutputWithContext(ctx context.Context) ManagedStorageAccountOutput

type ManagedStorageAccountSasTokenDefinition

type ManagedStorageAccountSasTokenDefinition struct {
	pulumi.CustomResourceState

	// The ID of the Managed Storage Account.
	ManagedStorageAccountId pulumi.StringOutput `pulumi:"managedStorageAccountId"`
	// The name which should be used for this SAS Definition.
	Name pulumi.StringOutput `pulumi:"name"`
	// The SAS definition token template signed with an arbitrary key. Tokens created according to the SAS definition will have the same properties as the template, but regenerated with a new validity period.
	SasTemplateUri pulumi.StringOutput `pulumi:"sasTemplateUri"`
	// The type of SAS token the SAS definition will create. Possible values are `account` and `service`.
	SasType pulumi.StringOutput `pulumi:"sasType"`
	// The ID of the Secret that is created by Managed Storage Account SAS Definition.
	SecretId pulumi.StringOutput `pulumi:"secretId"`
	// A mapping of tags which should be assigned to the SAS Definition. Changing this forces a new resource to be created.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Validity period of SAS token. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	ValidityPeriod pulumi.StringOutput `pulumi:"validityPeriod"`
}

Manages a Key Vault Managed Storage Account SAS Definition.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/storage"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		example, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAccount, err := storage.NewAccount(ctx, "example", &storage.AccountArgs{
			Name:                   pulumi.String("storageaccountname"),
			ResourceGroupName:      exampleResourceGroup.Name,
			Location:               exampleResourceGroup.Location,
			AccountTier:            pulumi.String("Standard"),
			AccountReplicationType: pulumi.String("LRS"),
		})
		if err != nil {
			return err
		}
		exampleGetAccountSAS := storage.GetAccountSASOutput(ctx, storage.GetAccountSASOutputArgs{
			ConnectionString: exampleAccount.PrimaryConnectionString,
			HttpsOnly:        pulumi.Bool(true),
			ResourceTypes: &storage.GetAccountSASResourceTypesArgs{
				Service:   pulumi.Bool(true),
				Container: pulumi.Bool(false),
				Object:    pulumi.Bool(false),
			},
			Services: &storage.GetAccountSASServicesArgs{
				Blob:  pulumi.Bool(true),
				Queue: pulumi.Bool(false),
				Table: pulumi.Bool(false),
				File:  pulumi.Bool(false),
			},
			Start:  pulumi.String("2021-04-30T00:00:00Z"),
			Expiry: pulumi.String("2023-04-30T00:00:00Z"),
			Permissions: &storage.GetAccountSASPermissionsArgs{
				Read:    pulumi.Bool(true),
				Write:   pulumi.Bool(true),
				Delete:  pulumi.Bool(false),
				List:    pulumi.Bool(false),
				Add:     pulumi.Bool(true),
				Create:  pulumi.Bool(true),
				Update:  pulumi.Bool(false),
				Process: pulumi.Bool(false),
				Tag:     pulumi.Bool(false),
				Filter:  pulumi.Bool(false),
			},
		}, nil)
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:              pulumi.String("example-keyvault"),
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			TenantId:          pulumi.String(example.TenantId),
			SkuName:           pulumi.String("standard"),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(example.TenantId),
					ObjectId: pulumi.String(example.ObjectId),
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("Delete"),
					},
					StoragePermissions: pulumi.StringArray{
						pulumi.String("Get"),
						pulumi.String("List"),
						pulumi.String("Set"),
						pulumi.String("SetSAS"),
						pulumi.String("GetSAS"),
						pulumi.String("DeleteSAS"),
						pulumi.String("Update"),
						pulumi.String("RegenerateKey"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		exampleManagedStorageAccount, err := keyvault.NewManagedStorageAccount(ctx, "example", &keyvault.ManagedStorageAccountArgs{
			Name:                       pulumi.String("examplemanagedstorage"),
			KeyVaultId:                 exampleKeyVault.ID(),
			StorageAccountId:           exampleAccount.ID(),
			StorageAccountKey:          pulumi.String("key1"),
			RegenerateKeyAutomatically: pulumi.Bool(false),
			RegenerationPeriod:         pulumi.String("P1D"),
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewManagedStorageAccountSasTokenDefinition(ctx, "example", &keyvault.ManagedStorageAccountSasTokenDefinitionArgs{
			Name:                    pulumi.String("examplesasdefinition"),
			ValidityPeriod:          pulumi.String("P1D"),
			ManagedStorageAccountId: exampleManagedStorageAccount.ID(),
			SasTemplateUri: exampleGetAccountSAS.ApplyT(func(exampleGetAccountSAS storage.GetAccountSASResult) (*string, error) {
				return &exampleGetAccountSAS.Sas, nil
			}).(pulumi.StringPtrOutput),
			SasType: pulumi.String("account"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vaults can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/managedStorageAccountSasTokenDefinition:ManagedStorageAccountSasTokenDefinition example https://example-keyvault.vault.azure.net/storage/exampleStorageAcc01/sas/exampleSasDefinition01 ```

func GetManagedStorageAccountSasTokenDefinition

func GetManagedStorageAccountSasTokenDefinition(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *ManagedStorageAccountSasTokenDefinitionState, opts ...pulumi.ResourceOption) (*ManagedStorageAccountSasTokenDefinition, error)

GetManagedStorageAccountSasTokenDefinition gets an existing ManagedStorageAccountSasTokenDefinition resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewManagedStorageAccountSasTokenDefinition

func NewManagedStorageAccountSasTokenDefinition(ctx *pulumi.Context,
	name string, args *ManagedStorageAccountSasTokenDefinitionArgs, opts ...pulumi.ResourceOption) (*ManagedStorageAccountSasTokenDefinition, error)

NewManagedStorageAccountSasTokenDefinition registers a new resource with the given unique name, arguments, and options.

func (*ManagedStorageAccountSasTokenDefinition) ElementType

func (*ManagedStorageAccountSasTokenDefinition) ToManagedStorageAccountSasTokenDefinitionOutput

func (i *ManagedStorageAccountSasTokenDefinition) ToManagedStorageAccountSasTokenDefinitionOutput() ManagedStorageAccountSasTokenDefinitionOutput

func (*ManagedStorageAccountSasTokenDefinition) ToManagedStorageAccountSasTokenDefinitionOutputWithContext

func (i *ManagedStorageAccountSasTokenDefinition) ToManagedStorageAccountSasTokenDefinitionOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionOutput

type ManagedStorageAccountSasTokenDefinitionArgs

type ManagedStorageAccountSasTokenDefinitionArgs struct {
	// The ID of the Managed Storage Account.
	ManagedStorageAccountId pulumi.StringInput
	// The name which should be used for this SAS Definition.
	Name pulumi.StringPtrInput
	// The SAS definition token template signed with an arbitrary key. Tokens created according to the SAS definition will have the same properties as the template, but regenerated with a new validity period.
	SasTemplateUri pulumi.StringInput
	// The type of SAS token the SAS definition will create. Possible values are `account` and `service`.
	SasType pulumi.StringInput
	// A mapping of tags which should be assigned to the SAS Definition. Changing this forces a new resource to be created.
	Tags pulumi.StringMapInput
	// Validity period of SAS token. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	ValidityPeriod pulumi.StringInput
}

The set of arguments for constructing a ManagedStorageAccountSasTokenDefinition resource.

func (ManagedStorageAccountSasTokenDefinitionArgs) ElementType

type ManagedStorageAccountSasTokenDefinitionArray

type ManagedStorageAccountSasTokenDefinitionArray []ManagedStorageAccountSasTokenDefinitionInput

func (ManagedStorageAccountSasTokenDefinitionArray) ElementType

func (ManagedStorageAccountSasTokenDefinitionArray) ToManagedStorageAccountSasTokenDefinitionArrayOutput

func (i ManagedStorageAccountSasTokenDefinitionArray) ToManagedStorageAccountSasTokenDefinitionArrayOutput() ManagedStorageAccountSasTokenDefinitionArrayOutput

func (ManagedStorageAccountSasTokenDefinitionArray) ToManagedStorageAccountSasTokenDefinitionArrayOutputWithContext

func (i ManagedStorageAccountSasTokenDefinitionArray) ToManagedStorageAccountSasTokenDefinitionArrayOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionArrayOutput

type ManagedStorageAccountSasTokenDefinitionArrayInput

type ManagedStorageAccountSasTokenDefinitionArrayInput interface {
	pulumi.Input

	ToManagedStorageAccountSasTokenDefinitionArrayOutput() ManagedStorageAccountSasTokenDefinitionArrayOutput
	ToManagedStorageAccountSasTokenDefinitionArrayOutputWithContext(context.Context) ManagedStorageAccountSasTokenDefinitionArrayOutput
}

ManagedStorageAccountSasTokenDefinitionArrayInput is an input type that accepts ManagedStorageAccountSasTokenDefinitionArray and ManagedStorageAccountSasTokenDefinitionArrayOutput values. You can construct a concrete instance of `ManagedStorageAccountSasTokenDefinitionArrayInput` via:

ManagedStorageAccountSasTokenDefinitionArray{ ManagedStorageAccountSasTokenDefinitionArgs{...} }

type ManagedStorageAccountSasTokenDefinitionArrayOutput

type ManagedStorageAccountSasTokenDefinitionArrayOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountSasTokenDefinitionArrayOutput) ElementType

func (ManagedStorageAccountSasTokenDefinitionArrayOutput) Index

func (ManagedStorageAccountSasTokenDefinitionArrayOutput) ToManagedStorageAccountSasTokenDefinitionArrayOutput

func (o ManagedStorageAccountSasTokenDefinitionArrayOutput) ToManagedStorageAccountSasTokenDefinitionArrayOutput() ManagedStorageAccountSasTokenDefinitionArrayOutput

func (ManagedStorageAccountSasTokenDefinitionArrayOutput) ToManagedStorageAccountSasTokenDefinitionArrayOutputWithContext

func (o ManagedStorageAccountSasTokenDefinitionArrayOutput) ToManagedStorageAccountSasTokenDefinitionArrayOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionArrayOutput

type ManagedStorageAccountSasTokenDefinitionInput

type ManagedStorageAccountSasTokenDefinitionInput interface {
	pulumi.Input

	ToManagedStorageAccountSasTokenDefinitionOutput() ManagedStorageAccountSasTokenDefinitionOutput
	ToManagedStorageAccountSasTokenDefinitionOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionOutput
}

type ManagedStorageAccountSasTokenDefinitionMap

type ManagedStorageAccountSasTokenDefinitionMap map[string]ManagedStorageAccountSasTokenDefinitionInput

func (ManagedStorageAccountSasTokenDefinitionMap) ElementType

func (ManagedStorageAccountSasTokenDefinitionMap) ToManagedStorageAccountSasTokenDefinitionMapOutput

func (i ManagedStorageAccountSasTokenDefinitionMap) ToManagedStorageAccountSasTokenDefinitionMapOutput() ManagedStorageAccountSasTokenDefinitionMapOutput

func (ManagedStorageAccountSasTokenDefinitionMap) ToManagedStorageAccountSasTokenDefinitionMapOutputWithContext

func (i ManagedStorageAccountSasTokenDefinitionMap) ToManagedStorageAccountSasTokenDefinitionMapOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionMapOutput

type ManagedStorageAccountSasTokenDefinitionMapInput

type ManagedStorageAccountSasTokenDefinitionMapInput interface {
	pulumi.Input

	ToManagedStorageAccountSasTokenDefinitionMapOutput() ManagedStorageAccountSasTokenDefinitionMapOutput
	ToManagedStorageAccountSasTokenDefinitionMapOutputWithContext(context.Context) ManagedStorageAccountSasTokenDefinitionMapOutput
}

ManagedStorageAccountSasTokenDefinitionMapInput is an input type that accepts ManagedStorageAccountSasTokenDefinitionMap and ManagedStorageAccountSasTokenDefinitionMapOutput values. You can construct a concrete instance of `ManagedStorageAccountSasTokenDefinitionMapInput` via:

ManagedStorageAccountSasTokenDefinitionMap{ "key": ManagedStorageAccountSasTokenDefinitionArgs{...} }

type ManagedStorageAccountSasTokenDefinitionMapOutput

type ManagedStorageAccountSasTokenDefinitionMapOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountSasTokenDefinitionMapOutput) ElementType

func (ManagedStorageAccountSasTokenDefinitionMapOutput) MapIndex

func (ManagedStorageAccountSasTokenDefinitionMapOutput) ToManagedStorageAccountSasTokenDefinitionMapOutput

func (o ManagedStorageAccountSasTokenDefinitionMapOutput) ToManagedStorageAccountSasTokenDefinitionMapOutput() ManagedStorageAccountSasTokenDefinitionMapOutput

func (ManagedStorageAccountSasTokenDefinitionMapOutput) ToManagedStorageAccountSasTokenDefinitionMapOutputWithContext

func (o ManagedStorageAccountSasTokenDefinitionMapOutput) ToManagedStorageAccountSasTokenDefinitionMapOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionMapOutput

type ManagedStorageAccountSasTokenDefinitionOutput

type ManagedStorageAccountSasTokenDefinitionOutput struct{ *pulumi.OutputState }

func (ManagedStorageAccountSasTokenDefinitionOutput) ElementType

func (ManagedStorageAccountSasTokenDefinitionOutput) ManagedStorageAccountId added in v5.5.0

The ID of the Managed Storage Account.

func (ManagedStorageAccountSasTokenDefinitionOutput) Name added in v5.5.0

The name which should be used for this SAS Definition.

func (ManagedStorageAccountSasTokenDefinitionOutput) SasTemplateUri added in v5.5.0

The SAS definition token template signed with an arbitrary key. Tokens created according to the SAS definition will have the same properties as the template, but regenerated with a new validity period.

func (ManagedStorageAccountSasTokenDefinitionOutput) SasType added in v5.5.0

The type of SAS token the SAS definition will create. Possible values are `account` and `service`.

func (ManagedStorageAccountSasTokenDefinitionOutput) SecretId added in v5.5.0

The ID of the Secret that is created by Managed Storage Account SAS Definition.

func (ManagedStorageAccountSasTokenDefinitionOutput) Tags added in v5.5.0

A mapping of tags which should be assigned to the SAS Definition. Changing this forces a new resource to be created.

func (ManagedStorageAccountSasTokenDefinitionOutput) ToManagedStorageAccountSasTokenDefinitionOutput

func (o ManagedStorageAccountSasTokenDefinitionOutput) ToManagedStorageAccountSasTokenDefinitionOutput() ManagedStorageAccountSasTokenDefinitionOutput

func (ManagedStorageAccountSasTokenDefinitionOutput) ToManagedStorageAccountSasTokenDefinitionOutputWithContext

func (o ManagedStorageAccountSasTokenDefinitionOutput) ToManagedStorageAccountSasTokenDefinitionOutputWithContext(ctx context.Context) ManagedStorageAccountSasTokenDefinitionOutput

func (ManagedStorageAccountSasTokenDefinitionOutput) ValidityPeriod added in v5.5.0

Validity period of SAS token. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).

type ManagedStorageAccountSasTokenDefinitionState

type ManagedStorageAccountSasTokenDefinitionState struct {
	// The ID of the Managed Storage Account.
	ManagedStorageAccountId pulumi.StringPtrInput
	// The name which should be used for this SAS Definition.
	Name pulumi.StringPtrInput
	// The SAS definition token template signed with an arbitrary key. Tokens created according to the SAS definition will have the same properties as the template, but regenerated with a new validity period.
	SasTemplateUri pulumi.StringPtrInput
	// The type of SAS token the SAS definition will create. Possible values are `account` and `service`.
	SasType pulumi.StringPtrInput
	// The ID of the Secret that is created by Managed Storage Account SAS Definition.
	SecretId pulumi.StringPtrInput
	// A mapping of tags which should be assigned to the SAS Definition. Changing this forces a new resource to be created.
	Tags pulumi.StringMapInput
	// Validity period of SAS token. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	ValidityPeriod pulumi.StringPtrInput
}

func (ManagedStorageAccountSasTokenDefinitionState) ElementType

type ManagedStorageAccountState

type ManagedStorageAccountState struct {
	// The ID of the Key Vault where the Managed Storage Account should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The name which should be used for this Key Vault Managed Storage Account. Changing this forces a new Key Vault Managed Storage Account to be created.
	Name pulumi.StringPtrInput
	// Should Storage Account access key be regenerated periodically?
	//
	// > **NOTE:** Azure Key Vault application needs to have access to Storage Account for auto regeneration to work. Example can be found above.
	RegenerateKeyAutomatically pulumi.BoolPtrInput
	// How often Storage Account access key should be regenerated. Value needs to be in [ISO 8601 duration format](https://en.wikipedia.org/wiki/ISO_8601#Durations).
	RegenerationPeriod pulumi.StringPtrInput
	// The ID of the Storage Account.
	StorageAccountId pulumi.StringPtrInput
	// Which Storage Account access key that is managed by Key Vault. Possible values are `key1` and `key2`.
	StorageAccountKey pulumi.StringPtrInput
	// A mapping of tags which should be assigned to the Key Vault Managed Storage Account. Changing this forces a new resource to be created.
	Tags pulumi.StringMapInput
}

func (ManagedStorageAccountState) ElementType

func (ManagedStorageAccountState) ElementType() reflect.Type

type Secret

type Secret struct {
	pulumi.CustomResourceState

	// Specifies the content type for the Key Vault Secret.
	ContentType pulumi.StringPtrOutput `pulumi:"contentType"`
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrOutput `pulumi:"expirationDate"`
	// The ID of the Key Vault where the Secret should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Secret. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrOutput `pulumi:"notBeforeDate"`
	// The (Versioned) ID for this Key Vault Secret. This property points to a specific version of a Key Vault Secret, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId pulumi.StringOutput `pulumi:"resourceId"`
	// The Versionless ID of the Key Vault Secret. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Secret is updated.
	ResourceVersionlessId pulumi.StringOutput `pulumi:"resourceVersionlessId"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// Specifies the value of the Key Vault Secret. Changing this will create a new version of the Key Vault Secret.
	//
	// > **Note:** Key Vault strips newlines. To preserve newlines in multi-line secrets try replacing them with `\n` or by base 64 encoding them with `replace(file("mySecretFile"), "/\n/", "\n")` or `base64encode(file("mySecretFile"))`, respectively.
	Value pulumi.StringOutput `pulumi:"value"`
	// The current version of the Key Vault Secret.
	Version pulumi.StringOutput `pulumi:"version"`
	// The Base ID of the Key Vault Secret.
	VersionlessId pulumi.StringOutput `pulumi:"versionlessId"`
}

Manages a Key Vault Secret.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v5/go/azure/keyvault"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		current, err := core.GetClientConfig(ctx, nil, nil)
		if err != nil {
			return err
		}
		example, err := core.NewResourceGroup(ctx, "example", &core.ResourceGroupArgs{
			Name:     pulumi.String("example-resources"),
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleKeyVault, err := keyvault.NewKeyVault(ctx, "example", &keyvault.KeyVaultArgs{
			Name:                    pulumi.String("examplekeyvault"),
			Location:                example.Location,
			ResourceGroupName:       example.Name,
			TenantId:                pulumi.String(current.TenantId),
			SkuName:                 pulumi.String("premium"),
			SoftDeleteRetentionDays: pulumi.Int(7),
			AccessPolicies: keyvault.KeyVaultAccessPolicyArray{
				&keyvault.KeyVaultAccessPolicyArgs{
					TenantId: pulumi.String(current.TenantId),
					ObjectId: pulumi.String(current.ObjectId),
					KeyPermissions: pulumi.StringArray{
						pulumi.String("Create"),
						pulumi.String("Get"),
					},
					SecretPermissions: pulumi.StringArray{
						pulumi.String("Set"),
						pulumi.String("Get"),
						pulumi.String("Delete"),
						pulumi.String("Purge"),
						pulumi.String("Recover"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = keyvault.NewSecret(ctx, "example", &keyvault.SecretArgs{
			Name:       pulumi.String("secret-sauce"),
			Value:      pulumi.String("szechuan"),
			KeyVaultId: exampleKeyVault.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Key Vault Secrets which are Enabled can be imported using the `resource id`, e.g.

```sh $ pulumi import azure:keyvault/secret:Secret example "https://example-keyvault.vault.azure.net/secrets/example/fdf067c93bbb4b22bff4d8b7a9a56217" ```

func GetSecret

func GetSecret(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *SecretState, opts ...pulumi.ResourceOption) (*Secret, error)

GetSecret gets an existing Secret resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewSecret

func NewSecret(ctx *pulumi.Context,
	name string, args *SecretArgs, opts ...pulumi.ResourceOption) (*Secret, error)

NewSecret registers a new resource with the given unique name, arguments, and options.

func (*Secret) ElementType

func (*Secret) ElementType() reflect.Type

func (*Secret) ToSecretOutput

func (i *Secret) ToSecretOutput() SecretOutput

func (*Secret) ToSecretOutputWithContext

func (i *Secret) ToSecretOutputWithContext(ctx context.Context) SecretOutput

type SecretArgs

type SecretArgs struct {
	// Specifies the content type for the Key Vault Secret.
	ContentType pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrInput
	// The ID of the Key Vault where the Secret should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Secret. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// Specifies the value of the Key Vault Secret. Changing this will create a new version of the Key Vault Secret.
	//
	// > **Note:** Key Vault strips newlines. To preserve newlines in multi-line secrets try replacing them with `\n` or by base 64 encoding them with `replace(file("mySecretFile"), "/\n/", "\n")` or `base64encode(file("mySecretFile"))`, respectively.
	Value pulumi.StringInput
}

The set of arguments for constructing a Secret resource.

func (SecretArgs) ElementType

func (SecretArgs) ElementType() reflect.Type

type SecretArray

type SecretArray []SecretInput

func (SecretArray) ElementType

func (SecretArray) ElementType() reflect.Type

func (SecretArray) ToSecretArrayOutput

func (i SecretArray) ToSecretArrayOutput() SecretArrayOutput

func (SecretArray) ToSecretArrayOutputWithContext

func (i SecretArray) ToSecretArrayOutputWithContext(ctx context.Context) SecretArrayOutput

type SecretArrayInput

type SecretArrayInput interface {
	pulumi.Input

	ToSecretArrayOutput() SecretArrayOutput
	ToSecretArrayOutputWithContext(context.Context) SecretArrayOutput
}

SecretArrayInput is an input type that accepts SecretArray and SecretArrayOutput values. You can construct a concrete instance of `SecretArrayInput` via:

SecretArray{ SecretArgs{...} }

type SecretArrayOutput

type SecretArrayOutput struct{ *pulumi.OutputState }

func (SecretArrayOutput) ElementType

func (SecretArrayOutput) ElementType() reflect.Type

func (SecretArrayOutput) Index

func (SecretArrayOutput) ToSecretArrayOutput

func (o SecretArrayOutput) ToSecretArrayOutput() SecretArrayOutput

func (SecretArrayOutput) ToSecretArrayOutputWithContext

func (o SecretArrayOutput) ToSecretArrayOutputWithContext(ctx context.Context) SecretArrayOutput

type SecretInput

type SecretInput interface {
	pulumi.Input

	ToSecretOutput() SecretOutput
	ToSecretOutputWithContext(ctx context.Context) SecretOutput
}

type SecretMap

type SecretMap map[string]SecretInput

func (SecretMap) ElementType

func (SecretMap) ElementType() reflect.Type

func (SecretMap) ToSecretMapOutput

func (i SecretMap) ToSecretMapOutput() SecretMapOutput

func (SecretMap) ToSecretMapOutputWithContext

func (i SecretMap) ToSecretMapOutputWithContext(ctx context.Context) SecretMapOutput

type SecretMapInput

type SecretMapInput interface {
	pulumi.Input

	ToSecretMapOutput() SecretMapOutput
	ToSecretMapOutputWithContext(context.Context) SecretMapOutput
}

SecretMapInput is an input type that accepts SecretMap and SecretMapOutput values. You can construct a concrete instance of `SecretMapInput` via:

SecretMap{ "key": SecretArgs{...} }

type SecretMapOutput

type SecretMapOutput struct{ *pulumi.OutputState }

func (SecretMapOutput) ElementType

func (SecretMapOutput) ElementType() reflect.Type

func (SecretMapOutput) MapIndex

func (SecretMapOutput) ToSecretMapOutput

func (o SecretMapOutput) ToSecretMapOutput() SecretMapOutput

func (SecretMapOutput) ToSecretMapOutputWithContext

func (o SecretMapOutput) ToSecretMapOutputWithContext(ctx context.Context) SecretMapOutput

type SecretOutput

type SecretOutput struct{ *pulumi.OutputState }

func (SecretOutput) ContentType added in v5.5.0

func (o SecretOutput) ContentType() pulumi.StringPtrOutput

Specifies the content type for the Key Vault Secret.

func (SecretOutput) ElementType

func (SecretOutput) ElementType() reflect.Type

func (SecretOutput) ExpirationDate added in v5.5.0

func (o SecretOutput) ExpirationDate() pulumi.StringPtrOutput

Expiration UTC datetime (Y-m-d'T'H:M:S'Z').

func (SecretOutput) KeyVaultId added in v5.5.0

func (o SecretOutput) KeyVaultId() pulumi.StringOutput

The ID of the Key Vault where the Secret should be created. Changing this forces a new resource to be created.

func (SecretOutput) Name added in v5.5.0

func (o SecretOutput) Name() pulumi.StringOutput

Specifies the name of the Key Vault Secret. Changing this forces a new resource to be created.

func (SecretOutput) NotBeforeDate added in v5.5.0

func (o SecretOutput) NotBeforeDate() pulumi.StringPtrOutput

Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').

func (SecretOutput) ResourceId added in v5.12.0

func (o SecretOutput) ResourceId() pulumi.StringOutput

The (Versioned) ID for this Key Vault Secret. This property points to a specific version of a Key Vault Secret, as such using this won't auto-rotate values if used in other Azure Services.

func (SecretOutput) ResourceVersionlessId added in v5.12.0

func (o SecretOutput) ResourceVersionlessId() pulumi.StringOutput

The Versionless ID of the Key Vault Secret. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Secret is updated.

func (SecretOutput) Tags added in v5.5.0

A mapping of tags to assign to the resource.

func (SecretOutput) ToSecretOutput

func (o SecretOutput) ToSecretOutput() SecretOutput

func (SecretOutput) ToSecretOutputWithContext

func (o SecretOutput) ToSecretOutputWithContext(ctx context.Context) SecretOutput

func (SecretOutput) Value added in v5.5.0

func (o SecretOutput) Value() pulumi.StringOutput

Specifies the value of the Key Vault Secret. Changing this will create a new version of the Key Vault Secret.

> **Note:** Key Vault strips newlines. To preserve newlines in multi-line secrets try replacing them with `\n` or by base 64 encoding them with `replace(file("mySecretFile"), "/\n/", "\n")` or `base64encode(file("mySecretFile"))`, respectively.

func (SecretOutput) Version added in v5.5.0

func (o SecretOutput) Version() pulumi.StringOutput

The current version of the Key Vault Secret.

func (SecretOutput) VersionlessId added in v5.5.0

func (o SecretOutput) VersionlessId() pulumi.StringOutput

The Base ID of the Key Vault Secret.

type SecretState

type SecretState struct {
	// Specifies the content type for the Key Vault Secret.
	ContentType pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrInput
	// The ID of the Key Vault where the Secret should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// Specifies the name of the Key Vault Secret. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrInput
	// The (Versioned) ID for this Key Vault Secret. This property points to a specific version of a Key Vault Secret, as such using this won't auto-rotate values if used in other Azure Services.
	ResourceId pulumi.StringPtrInput
	// The Versionless ID of the Key Vault Secret. This property allows other Azure Services (that support it) to auto-rotate their value when the Key Vault Secret is updated.
	ResourceVersionlessId pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// Specifies the value of the Key Vault Secret. Changing this will create a new version of the Key Vault Secret.
	//
	// > **Note:** Key Vault strips newlines. To preserve newlines in multi-line secrets try replacing them with `\n` or by base 64 encoding them with `replace(file("mySecretFile"), "/\n/", "\n")` or `base64encode(file("mySecretFile"))`, respectively.
	Value pulumi.StringPtrInput
	// The current version of the Key Vault Secret.
	Version pulumi.StringPtrInput
	// The Base ID of the Key Vault Secret.
	VersionlessId pulumi.StringPtrInput
}

func (SecretState) ElementType

func (SecretState) ElementType() reflect.Type

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL