1. Packages
  2. Azure Native
  3. API Docs
  4. sovereign
  5. LandingZoneConfigurationOperation
This is the latest version of Azure Native. Use the Azure Native v2 docs if using the v2 version of this package.
Azure Native v3.2.0 published on Monday, Apr 14, 2025 by Pulumi

azure-native.sovereign.LandingZoneConfigurationOperation

Explore with Pulumi AI

Concrete proxy resource types can be created by aliasing this type using a specific property type.

Uses Azure REST API version 2025-02-27-preview. In version 2.x of the Azure Native provider, it used API version 2025-02-27-preview.

Example Usage

LandingZoneConfigurationOperations_Create

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var landingZoneConfigurationOperation = new AzureNative.Sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation", new()
    {
        LandingZoneAccountName = "lza-RemApiExample",
        LandingZoneConfigurationName = "lzc-RemApiExample",
        Properties = new AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourcePropertiesArgs
        {
            AzureBastionCreationOption = AzureNative.Sovereign.ResourceCreationOptions.UseExisting,
            CustomNamingConvention = new[]
            {
                new AzureNative.Sovereign.Inputs.CustomNamingConventionArgs
                {
                    Formula = "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}",
                    ResourceType = AzureNative.Sovereign.ResourceType.DdosProtectionPlans,
                },
            },
            DdosProtectionCreationOption = AzureNative.Sovereign.ResourceCreationOptions.UseExisting,
            DecommissionedMgMetadata = new AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesArgs
            {
                Create = true,
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            ExistingAzureBastionId = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample",
            ExistingDdosProtectionId = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample",
            ExistingLogAnalyticsWorkspaceId = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample",
            FirewallCreationOption = AzureNative.Sovereign.FirewallCreationOptions.Premium,
            FirewallSubnetCidrBlock = "10.20.254.0/24",
            GatewaySubnetCidrBlock = "10.20.252.0/24",
            HubNetworkCidrBlock = "10.20.0.0/16",
            LandingZonesMgChildren = new[]
            {
                new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
                {
                    Name = "Corp",
                    PolicyInitiativesAssignmentProperties = new() { },
                },
                new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
                {
                    Name = "Online",
                    PolicyInitiativesAssignmentProperties = new() { },
                },
                new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
                {
                    Name = "Confidential Corp",
                    PolicyInitiativesAssignmentProperties = new[]
                    {
                        new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                        {
                            AssignmentParameters = null,
                            PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                        },
                    },
                },
                new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
                {
                    Name = "Confidential Online",
                    PolicyInitiativesAssignmentProperties = new[]
                    {
                        new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                        {
                            AssignmentParameters = null,
                            PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                        },
                    },
                },
            },
            LandingZonesMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            LogAnalyticsWorkspaceCreationOption = AzureNative.Sovereign.ResourceCreationOptions.UseExisting,
            LogRetentionInDays = 540,
            ManagedIdentity = new AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesArgs
            {
                Type = AzureNative.Sovereign.ManagedIdentityResourceType.UserAssigned,
                UserAssignedIdentityResourceId = "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample",
            },
            NamingConventionFormula = "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}",
            PlatformConnectivityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            PlatformIdentityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            PlatformManagementMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            PlatformMgChildren = new[]
            {
                new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
                {
                    Name = "Telemetry",
                    PolicyInitiativesAssignmentProperties = new[]
                    {
                        new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                        {
                            AssignmentParameters = new Dictionary<string, object?>
                            {
                                ["listOfAllowedLocations"] = new[]
                                {
                                    "swedencentral",
                                },
                            },
                            PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                        },
                    },
                },
                new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
                {
                    Name = "Security",
                    PolicyInitiativesAssignmentProperties = new[]
                    {
                        new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                        {
                            AssignmentParameters = new Dictionary<string, object?>
                            {
                                ["listOfAllowedLocations"] = new[]
                                {
                                    "swedencentral",
                                },
                            },
                            PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                        },
                    },
                },
            },
            PlatformMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            SandboxMgMetadata = new AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesArgs
            {
                Create = true,
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
            Tags = new[]
            {
                new AzureNative.Sovereign.Inputs.TagsArgs
                {
                    Name = "tag1",
                    Value = "Lorem",
                },
                new AzureNative.Sovereign.Inputs.TagsArgs
                {
                    Name = "tag2",
                    Value = "Ipsum",
                },
            },
            TopLevelMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
            {
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = new Dictionary<string, object?>
                        {
                            ["listOfAllowedLocations"] = new[]
                            {
                                "swedencentral",
                                "eastus2",
                                "uksouth",
                            },
                        },
                        PolicyInitiativeId = "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                    },
                },
            },
        },
        ResourceGroupName = "rg-RemApiExample",
    });

});
Copy
package main

import (
	sovereign "github.com/pulumi/pulumi-azure-native-sdk/sovereign/v3"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := sovereign.NewLandingZoneConfigurationOperation(ctx, "landingZoneConfigurationOperation", &sovereign.LandingZoneConfigurationOperationArgs{
			LandingZoneAccountName:       pulumi.String("lza-RemApiExample"),
			LandingZoneConfigurationName: pulumi.String("lzc-RemApiExample"),
			Properties: &sovereign.LandingZoneConfigurationResourcePropertiesArgs{
				AzureBastionCreationOption: pulumi.String(sovereign.ResourceCreationOptionsUseExisting),
				CustomNamingConvention: sovereign.CustomNamingConventionArray{
					&sovereign.CustomNamingConventionArgs{
						Formula:      pulumi.String("{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}"),
						ResourceType: pulumi.String(sovereign.ResourceTypeDdosProtectionPlans),
					},
				},
				DdosProtectionCreationOption: pulumi.String(sovereign.ResourceCreationOptionsUseExisting),
				DecommissionedMgMetadata: &sovereign.DecommissionedManagementGroupPropertiesArgs{
					Create: pulumi.Bool(true),
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				ExistingAzureBastionId:          pulumi.String("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample"),
				ExistingDdosProtectionId:        pulumi.String("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample"),
				ExistingLogAnalyticsWorkspaceId: pulumi.String("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample"),
				FirewallCreationOption:          pulumi.String(sovereign.FirewallCreationOptionsPremium),
				FirewallSubnetCidrBlock:         pulumi.String("10.20.254.0/24"),
				GatewaySubnetCidrBlock:          pulumi.String("10.20.252.0/24"),
				HubNetworkCidrBlock:             pulumi.String("10.20.0.0/16"),
				LandingZonesMgChildren: sovereign.LandingZoneManagementGroupPropertiesArray{
					&sovereign.LandingZoneManagementGroupPropertiesArgs{
						Name:                                  pulumi.String("Corp"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
					},
					&sovereign.LandingZoneManagementGroupPropertiesArgs{
						Name:                                  pulumi.String("Online"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{},
					},
					&sovereign.LandingZoneManagementGroupPropertiesArgs{
						Name: pulumi.String("Confidential Corp"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
							&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
								AssignmentParameters: pulumi.Any(map[string]interface{}{}),
								PolicyInitiativeId:   pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea"),
							},
						},
					},
					&sovereign.LandingZoneManagementGroupPropertiesArgs{
						Name: pulumi.String("Confidential Online"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
							&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
								AssignmentParameters: pulumi.Any(map[string]interface{}{}),
								PolicyInitiativeId:   pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea"),
							},
						},
					},
				},
				LandingZonesMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				LogAnalyticsWorkspaceCreationOption: pulumi.String(sovereign.ResourceCreationOptionsUseExisting),
				LogRetentionInDays:                  pulumi.Float64(540),
				ManagedIdentity: &sovereign.ManagedIdentityPropertiesArgs{
					Type:                           pulumi.String(sovereign.ManagedIdentityResourceTypeUserAssigned),
					UserAssignedIdentityResourceId: pulumi.String("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample"),
				},
				NamingConventionFormula: pulumi.String("{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}"),
				PlatformConnectivityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				PlatformIdentityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				PlatformManagementMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				PlatformMgChildren: sovereign.PlatformManagementGroupPropertiesArray{
					&sovereign.PlatformManagementGroupPropertiesArgs{
						Name: pulumi.String("Telemetry"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
							&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
								AssignmentParameters: pulumi.Any(map[string]interface{}{
									"listOfAllowedLocations": []string{
										"swedencentral",
									},
								}),
								PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
							},
						},
					},
					&sovereign.PlatformManagementGroupPropertiesArgs{
						Name: pulumi.String("Security"),
						PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
							&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
								AssignmentParameters: pulumi.Any(map[string]interface{}{
									"listOfAllowedLocations": []string{
										"swedencentral",
									},
								}),
								PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
							},
						},
					},
				},
				PlatformMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				SandboxMgMetadata: &sovereign.SandboxManagementGroupPropertiesArgs{
					Create: pulumi.Bool(true),
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
				Tags: sovereign.TagsArray{
					&sovereign.TagsArgs{
						Name:  pulumi.String("tag1"),
						Value: pulumi.String("Lorem"),
					},
					&sovereign.TagsArgs{
						Name:  pulumi.String("tag2"),
						Value: pulumi.String("Ipsum"),
					},
				},
				TopLevelMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
					PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
						&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
							AssignmentParameters: pulumi.Any(map[string]interface{}{
								"listOfAllowedLocations": []string{
									"swedencentral",
									"eastus2",
									"uksouth",
								},
							}),
							PolicyInitiativeId: pulumi.String("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523"),
						},
					},
				},
			},
			ResourceGroupName: pulumi.String("rg-RemApiExample"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.sovereign.LandingZoneConfigurationOperation;
import com.pulumi.azurenative.sovereign.LandingZoneConfigurationOperationArgs;
import com.pulumi.azurenative.sovereign.inputs.LandingZoneConfigurationResourcePropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.DecommissionedManagementGroupPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.ManagementGroupPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.ManagedIdentityPropertiesArgs;
import com.pulumi.azurenative.sovereign.inputs.SandboxManagementGroupPropertiesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var landingZoneConfigurationOperation = new LandingZoneConfigurationOperation("landingZoneConfigurationOperation", LandingZoneConfigurationOperationArgs.builder()
            .landingZoneAccountName("lza-RemApiExample")
            .landingZoneConfigurationName("lzc-RemApiExample")
            .properties(LandingZoneConfigurationResourcePropertiesArgs.builder()
                .azureBastionCreationOption("UseExisting")
                .customNamingConvention(CustomNamingConventionArgs.builder()
                    .formula("{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}")
                    .resourceType("ddosProtectionPlans")
                    .build())
                .ddosProtectionCreationOption("UseExisting")
                .decommissionedMgMetadata(DecommissionedManagementGroupPropertiesArgs.builder()
                    .create(true)
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .existingAzureBastionId("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample")
                .existingDdosProtectionId("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample")
                .existingLogAnalyticsWorkspaceId("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample")
                .firewallCreationOption("Premium")
                .firewallSubnetCidrBlock("10.20.254.0/24")
                .gatewaySubnetCidrBlock("10.20.252.0/24")
                .hubNetworkCidrBlock("10.20.0.0/16")
                .landingZonesMgChildren(                
                    LandingZoneManagementGroupPropertiesArgs.builder()
                        .name("Corp")
                        .policyInitiativesAssignmentProperties()
                        .build(),
                    LandingZoneManagementGroupPropertiesArgs.builder()
                        .name("Online")
                        .policyInitiativesAssignmentProperties()
                        .build(),
                    LandingZoneManagementGroupPropertiesArgs.builder()
                        .name("Confidential Corp")
                        .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                            .assignmentParameters(Map.ofEntries(
                            ))
                            .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea")
                            .build())
                        .build(),
                    LandingZoneManagementGroupPropertiesArgs.builder()
                        .name("Confidential Online")
                        .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                            .assignmentParameters(Map.ofEntries(
                            ))
                            .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea")
                            .build())
                        .build())
                .landingZonesMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .logAnalyticsWorkspaceCreationOption("UseExisting")
                .logRetentionInDays(540.0)
                .managedIdentity(ManagedIdentityPropertiesArgs.builder()
                    .type("UserAssigned")
                    .userAssignedIdentityResourceId("/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample")
                    .build())
                .namingConventionFormula("{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}")
                .platformConnectivityMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .platformIdentityMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .platformManagementMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .platformMgChildren(                
                    PlatformManagementGroupPropertiesArgs.builder()
                        .name("Telemetry")
                        .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                            .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                            .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                            .build())
                        .build(),
                    PlatformManagementGroupPropertiesArgs.builder()
                        .name("Security")
                        .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                            .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                            .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                            .build())
                        .build())
                .platformMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .sandboxMgMetadata(SandboxManagementGroupPropertiesArgs.builder()
                    .create(true)
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations", "swedencentral"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .tags(                
                    TagsArgs.builder()
                        .name("tag1")
                        .value("Lorem")
                        .build(),
                    TagsArgs.builder()
                        .name("tag2")
                        .value("Ipsum")
                        .build())
                .topLevelMgMetadata(ManagementGroupPropertiesArgs.builder()
                    .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                        .assignmentParameters(Map.of("listOfAllowedLocations",                         
                            "swedencentral",
                            "eastus2",
                            "uksouth"))
                        .policyInitiativeId("/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523")
                        .build())
                    .build())
                .build())
            .resourceGroupName("rg-RemApiExample")
            .build());

    }
}
Copy
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const landingZoneConfigurationOperation = new azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation", {
    landingZoneAccountName: "lza-RemApiExample",
    landingZoneConfigurationName: "lzc-RemApiExample",
    properties: {
        azureBastionCreationOption: azure_native.sovereign.ResourceCreationOptions.UseExisting,
        customNamingConvention: [{
            formula: "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}",
            resourceType: azure_native.sovereign.ResourceType.DdosProtectionPlans,
        }],
        ddosProtectionCreationOption: azure_native.sovereign.ResourceCreationOptions.UseExisting,
        decommissionedMgMetadata: {
            create: true,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        existingAzureBastionId: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample",
        existingDdosProtectionId: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample",
        existingLogAnalyticsWorkspaceId: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample",
        firewallCreationOption: azure_native.sovereign.FirewallCreationOptions.Premium,
        firewallSubnetCidrBlock: "10.20.254.0/24",
        gatewaySubnetCidrBlock: "10.20.252.0/24",
        hubNetworkCidrBlock: "10.20.0.0/16",
        landingZonesMgChildren: [
            {
                name: "Corp",
                policyInitiativesAssignmentProperties: [],
            },
            {
                name: "Online",
                policyInitiativesAssignmentProperties: [],
            },
            {
                name: "Confidential Corp",
                policyInitiativesAssignmentProperties: [{
                    assignmentParameters: {},
                    policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                }],
            },
            {
                name: "Confidential Online",
                policyInitiativesAssignmentProperties: [{
                    assignmentParameters: {},
                    policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                }],
            },
        ],
        landingZonesMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        logAnalyticsWorkspaceCreationOption: azure_native.sovereign.ResourceCreationOptions.UseExisting,
        logRetentionInDays: 540,
        managedIdentity: {
            type: azure_native.sovereign.ManagedIdentityResourceType.UserAssigned,
            userAssignedIdentityResourceId: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample",
        },
        namingConventionFormula: "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}",
        platformConnectivityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        platformIdentityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        platformManagementMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        platformMgChildren: [
            {
                name: "Telemetry",
                policyInitiativesAssignmentProperties: [{
                    assignmentParameters: {
                        listOfAllowedLocations: ["swedencentral"],
                    },
                    policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                }],
            },
            {
                name: "Security",
                policyInitiativesAssignmentProperties: [{
                    assignmentParameters: {
                        listOfAllowedLocations: ["swedencentral"],
                    },
                    policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                }],
            },
        ],
        platformMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        sandboxMgMetadata: {
            create: true,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: ["swedencentral"],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        tags: [
            {
                name: "tag1",
                value: "Lorem",
            },
            {
                name: "tag2",
                value: "Ipsum",
            },
        ],
        topLevelMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: {
                    listOfAllowedLocations: [
                        "swedencentral",
                        "eastus2",
                        "uksouth",
                    ],
                },
                policyInitiativeId: "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
    },
    resourceGroupName: "rg-RemApiExample",
});
Copy
import pulumi
import pulumi_azure_native as azure_native

landing_zone_configuration_operation = azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperation",
    landing_zone_account_name="lza-RemApiExample",
    landing_zone_configuration_name="lzc-RemApiExample",
    properties={
        "azure_bastion_creation_option": azure_native.sovereign.ResourceCreationOptions.USE_EXISTING,
        "custom_naming_convention": [{
            "formula": "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}",
            "resource_type": azure_native.sovereign.ResourceType.DDOS_PROTECTION_PLANS,
        }],
        "ddos_protection_creation_option": azure_native.sovereign.ResourceCreationOptions.USE_EXISTING,
        "decommissioned_mg_metadata": {
            "create": True,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "existing_azure_bastion_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample",
        "existing_ddos_protection_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample",
        "existing_log_analytics_workspace_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample",
        "firewall_creation_option": azure_native.sovereign.FirewallCreationOptions.PREMIUM,
        "firewall_subnet_cidr_block": "10.20.254.0/24",
        "gateway_subnet_cidr_block": "10.20.252.0/24",
        "hub_network_cidr_block": "10.20.0.0/16",
        "landing_zones_mg_children": [
            {
                "name": "Corp",
                "policy_initiatives_assignment_properties": [],
            },
            {
                "name": "Online",
                "policy_initiatives_assignment_properties": [],
            },
            {
                "name": "Confidential Corp",
                "policy_initiatives_assignment_properties": [{
                    "assignment_parameters": {},
                    "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                }],
            },
            {
                "name": "Confidential Online",
                "policy_initiatives_assignment_properties": [{
                    "assignment_parameters": {},
                    "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea",
                }],
            },
        ],
        "landing_zones_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "log_analytics_workspace_creation_option": azure_native.sovereign.ResourceCreationOptions.USE_EXISTING,
        "log_retention_in_days": 540,
        "managed_identity": {
            "type": azure_native.sovereign.ManagedIdentityResourceType.USER_ASSIGNED,
            "user_assigned_identity_resource_id": "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample",
        },
        "naming_convention_formula": "{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}",
        "platform_connectivity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "platform_identity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "platform_management_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "platform_mg_children": [
            {
                "name": "Telemetry",
                "policy_initiatives_assignment_properties": [{
                    "assignment_parameters": {
                        "listOfAllowedLocations": ["swedencentral"],
                    },
                    "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                }],
            },
            {
                "name": "Security",
                "policy_initiatives_assignment_properties": [{
                    "assignment_parameters": {
                        "listOfAllowedLocations": ["swedencentral"],
                    },
                    "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
                }],
            },
        ],
        "platform_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "sandbox_mg_metadata": {
            "create": True,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": ["swedencentral"],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
        "tags": [
            {
                "name": "tag1",
                "value": "Lorem",
            },
            {
                "name": "tag2",
                "value": "Ipsum",
            },
        ],
        "top_level_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": {
                    "listOfAllowedLocations": [
                        "swedencentral",
                        "eastus2",
                        "uksouth",
                    ],
                },
                "policy_initiative_id": "/providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523",
            }],
        },
    },
    resource_group_name="rg-RemApiExample")
Copy
resources:
  landingZoneConfigurationOperation:
    type: azure-native:sovereign:LandingZoneConfigurationOperation
    properties:
      landingZoneAccountName: lza-RemApiExample
      landingZoneConfigurationName: lzc-RemApiExample
      properties:
        azureBastionCreationOption: UseExisting
        customNamingConvention:
          - formula: '{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}'
            resourceType: ddosProtectionPlans
        ddosProtectionCreationOption: UseExisting
        decommissionedMgMetadata:
          create: true
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        existingAzureBastionId: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/bastionHosts/bas-RemApiExample
        existingDdosProtectionId: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.Network/ddosProtectionPlans/ddos-RemApiExample
        existingLogAnalyticsWorkspaceId: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.OperationalInsights/workspaces/log-RemApiExample
        firewallCreationOption: Premium
        firewallSubnetCidrBlock: 10.20.254.0/24
        gatewaySubnetCidrBlock: 10.20.252.0/24
        hubNetworkCidrBlock: 10.20.0.0/16
        landingZonesMgChildren:
          - name: Corp
            policyInitiativesAssignmentProperties: []
          - name: Online
            policyInitiativesAssignmentProperties: []
          - name: Confidential Corp
            policyInitiativesAssignmentProperties:
              - assignmentParameters: {}
                policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea
          - name: Confidential Online
            policyInitiativesAssignmentProperties:
              - assignmentParameters: {}
                policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/03de05a4-c324-4ccd-882f-a814ea8ab9ea
        landingZonesMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        logAnalyticsWorkspaceCreationOption: UseExisting
        logRetentionInDays: 540
        managedIdentity:
          type: UserAssigned
          userAssignedIdentityResourceId: /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg-RemApiExample/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-RemApiExample
        namingConventionFormula: '{ResourceTypeAbbreviation}-{DeploymentPrefix}-Contoso-{DeploymentSuffix}-{Environment}'
        platformConnectivityMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        platformIdentityMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        platformManagementMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        platformMgChildren:
          - name: Telemetry
            policyInitiativesAssignmentProperties:
              - assignmentParameters:
                  listOfAllowedLocations:
                    - swedencentral
                policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
          - name: Security
            policyInitiativesAssignmentProperties:
              - assignmentParameters:
                  listOfAllowedLocations:
                    - swedencentral
                policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        platformMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        sandboxMgMetadata:
          create: true
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
        tags:
          - name: tag1
            value: Lorem
          - name: tag2
            value: Ipsum
        topLevelMgMetadata:
          policyInitiativesAssignmentProperties:
            - assignmentParameters:
                listOfAllowedLocations:
                  - swedencentral
                  - eastus2
                  - uksouth
              policyInitiativeId: /providers/Microsoft.Authorization/policySetDefinitions/c1cbff38-87c0-4b9f-9f70-035c7a3b5523
      resourceGroupName: rg-RemApiExample
Copy

Create LandingZoneConfigurationOperation Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new LandingZoneConfigurationOperation(name: string, args: LandingZoneConfigurationOperationArgs, opts?: CustomResourceOptions);
@overload
def LandingZoneConfigurationOperation(resource_name: str,
                                      args: LandingZoneConfigurationOperationArgs,
                                      opts: Optional[ResourceOptions] = None)

@overload
def LandingZoneConfigurationOperation(resource_name: str,
                                      opts: Optional[ResourceOptions] = None,
                                      landing_zone_account_name: Optional[str] = None,
                                      resource_group_name: Optional[str] = None,
                                      landing_zone_configuration_name: Optional[str] = None,
                                      properties: Optional[LandingZoneConfigurationResourcePropertiesArgs] = None)
func NewLandingZoneConfigurationOperation(ctx *Context, name string, args LandingZoneConfigurationOperationArgs, opts ...ResourceOption) (*LandingZoneConfigurationOperation, error)
public LandingZoneConfigurationOperation(string name, LandingZoneConfigurationOperationArgs args, CustomResourceOptions? opts = null)
public LandingZoneConfigurationOperation(String name, LandingZoneConfigurationOperationArgs args)
public LandingZoneConfigurationOperation(String name, LandingZoneConfigurationOperationArgs args, CustomResourceOptions options)
type: azure-native:sovereign:LandingZoneConfigurationOperation
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. LandingZoneConfigurationOperationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. LandingZoneConfigurationOperationArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. LandingZoneConfigurationOperationArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. LandingZoneConfigurationOperationArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. LandingZoneConfigurationOperationArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var landingZoneConfigurationOperationResource = new AzureNative.Sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", new()
{
    LandingZoneAccountName = "string",
    ResourceGroupName = "string",
    LandingZoneConfigurationName = "string",
    Properties = new AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourcePropertiesArgs
    {
        FirewallCreationOption = "string",
        ManagedIdentity = new AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesArgs
        {
            Type = "string",
            UserAssignedIdentityResourceId = "string",
        },
        LogRetentionInDays = 0,
        DdosProtectionCreationOption = "string",
        LogAnalyticsWorkspaceCreationOption = "string",
        AzureBastionCreationOption = "string",
        HubNetworkCidrBlock = "string",
        GatewaySubnetCidrBlock = "string",
        LandingZonesMgChildren = new[]
        {
            new AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesArgs
            {
                Name = "string",
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = "any",
                        PolicyInitiativeId = "string",
                    },
                },
            },
        },
        NamingConventionFormula = "string",
        ExistingLogAnalyticsWorkspaceId = "string",
        ExistingDdosProtectionId = "string",
        ExistingAzureBastionId = "string",
        LandingZonesMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        DecommissionedMgMetadata = new AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesArgs
        {
            Create = false,
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        CustomNamingConvention = new[]
        {
            new AzureNative.Sovereign.Inputs.CustomNamingConventionArgs
            {
                Formula = "string",
                ResourceType = "string",
            },
        },
        AzureBastionSubnetCidrBlock = "string",
        FirewallSubnetCidrBlock = "string",
        PlatformConnectivityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformIdentityMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformManagementMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        PlatformMgChildren = new[]
        {
            new AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesArgs
            {
                Name = "string",
                PolicyInitiativesAssignmentProperties = new[]
                {
                    new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                    {
                        AssignmentParameters = "any",
                        PolicyInitiativeId = "string",
                    },
                },
            },
        },
        PlatformMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        SandboxMgMetadata = new AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesArgs
        {
            Create = false,
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
        Tags = new[]
        {
            new AzureNative.Sovereign.Inputs.TagsArgs
            {
                Name = "string",
                Value = "string",
            },
        },
        TopLevelMgMetadata = new AzureNative.Sovereign.Inputs.ManagementGroupPropertiesArgs
        {
            PolicyInitiativesAssignmentProperties = new[]
            {
                new AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesArgs
                {
                    AssignmentParameters = "any",
                    PolicyInitiativeId = "string",
                },
            },
        },
    },
});
Copy
example, err := sovereign.NewLandingZoneConfigurationOperation(ctx, "landingZoneConfigurationOperationResource", &sovereign.LandingZoneConfigurationOperationArgs{
	LandingZoneAccountName:       pulumi.String("string"),
	ResourceGroupName:            pulumi.String("string"),
	LandingZoneConfigurationName: pulumi.String("string"),
	Properties: &sovereign.LandingZoneConfigurationResourcePropertiesArgs{
		FirewallCreationOption: pulumi.String("string"),
		ManagedIdentity: &sovereign.ManagedIdentityPropertiesArgs{
			Type:                           pulumi.String("string"),
			UserAssignedIdentityResourceId: pulumi.String("string"),
		},
		LogRetentionInDays:                  pulumi.Float64(0),
		DdosProtectionCreationOption:        pulumi.String("string"),
		LogAnalyticsWorkspaceCreationOption: pulumi.String("string"),
		AzureBastionCreationOption:          pulumi.String("string"),
		HubNetworkCidrBlock:                 pulumi.String("string"),
		GatewaySubnetCidrBlock:              pulumi.String("string"),
		LandingZonesMgChildren: sovereign.LandingZoneManagementGroupPropertiesArray{
			&sovereign.LandingZoneManagementGroupPropertiesArgs{
				Name: pulumi.String("string"),
				PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
					&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
						AssignmentParameters: pulumi.Any("any"),
						PolicyInitiativeId:   pulumi.String("string"),
					},
				},
			},
		},
		NamingConventionFormula:         pulumi.String("string"),
		ExistingLogAnalyticsWorkspaceId: pulumi.String("string"),
		ExistingDdosProtectionId:        pulumi.String("string"),
		ExistingAzureBastionId:          pulumi.String("string"),
		LandingZonesMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		DecommissionedMgMetadata: &sovereign.DecommissionedManagementGroupPropertiesArgs{
			Create: pulumi.Bool(false),
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		CustomNamingConvention: sovereign.CustomNamingConventionArray{
			&sovereign.CustomNamingConventionArgs{
				Formula:      pulumi.String("string"),
				ResourceType: pulumi.String("string"),
			},
		},
		AzureBastionSubnetCidrBlock: pulumi.String("string"),
		FirewallSubnetCidrBlock:     pulumi.String("string"),
		PlatformConnectivityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformIdentityMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformManagementMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		PlatformMgChildren: sovereign.PlatformManagementGroupPropertiesArray{
			&sovereign.PlatformManagementGroupPropertiesArgs{
				Name: pulumi.String("string"),
				PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
					&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
						AssignmentParameters: pulumi.Any("any"),
						PolicyInitiativeId:   pulumi.String("string"),
					},
				},
			},
		},
		PlatformMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		SandboxMgMetadata: &sovereign.SandboxManagementGroupPropertiesArgs{
			Create: pulumi.Bool(false),
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
		Tags: sovereign.TagsArray{
			&sovereign.TagsArgs{
				Name:  pulumi.String("string"),
				Value: pulumi.String("string"),
			},
		},
		TopLevelMgMetadata: &sovereign.ManagementGroupPropertiesArgs{
			PolicyInitiativesAssignmentProperties: sovereign.PolicyInitiativeAssignmentPropertiesArray{
				&sovereign.PolicyInitiativeAssignmentPropertiesArgs{
					AssignmentParameters: pulumi.Any("any"),
					PolicyInitiativeId:   pulumi.String("string"),
				},
			},
		},
	},
})
Copy
var landingZoneConfigurationOperationResource = new LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", LandingZoneConfigurationOperationArgs.builder()
    .landingZoneAccountName("string")
    .resourceGroupName("string")
    .landingZoneConfigurationName("string")
    .properties(LandingZoneConfigurationResourcePropertiesArgs.builder()
        .firewallCreationOption("string")
        .managedIdentity(ManagedIdentityPropertiesArgs.builder()
            .type("string")
            .userAssignedIdentityResourceId("string")
            .build())
        .logRetentionInDays(0)
        .ddosProtectionCreationOption("string")
        .logAnalyticsWorkspaceCreationOption("string")
        .azureBastionCreationOption("string")
        .hubNetworkCidrBlock("string")
        .gatewaySubnetCidrBlock("string")
        .landingZonesMgChildren(LandingZoneManagementGroupPropertiesArgs.builder()
            .name("string")
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .namingConventionFormula("string")
        .existingLogAnalyticsWorkspaceId("string")
        .existingDdosProtectionId("string")
        .existingAzureBastionId("string")
        .landingZonesMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .decommissionedMgMetadata(DecommissionedManagementGroupPropertiesArgs.builder()
            .create(false)
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .customNamingConvention(CustomNamingConventionArgs.builder()
            .formula("string")
            .resourceType("string")
            .build())
        .azureBastionSubnetCidrBlock("string")
        .firewallSubnetCidrBlock("string")
        .platformConnectivityMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformIdentityMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformManagementMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformMgChildren(PlatformManagementGroupPropertiesArgs.builder()
            .name("string")
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .platformMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .sandboxMgMetadata(SandboxManagementGroupPropertiesArgs.builder()
            .create(false)
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .tags(TagsArgs.builder()
            .name("string")
            .value("string")
            .build())
        .topLevelMgMetadata(ManagementGroupPropertiesArgs.builder()
            .policyInitiativesAssignmentProperties(PolicyInitiativeAssignmentPropertiesArgs.builder()
                .assignmentParameters("any")
                .policyInitiativeId("string")
                .build())
            .build())
        .build())
    .build());
Copy
landing_zone_configuration_operation_resource = azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource",
    landing_zone_account_name="string",
    resource_group_name="string",
    landing_zone_configuration_name="string",
    properties={
        "firewall_creation_option": "string",
        "managed_identity": {
            "type": "string",
            "user_assigned_identity_resource_id": "string",
        },
        "log_retention_in_days": 0,
        "ddos_protection_creation_option": "string",
        "log_analytics_workspace_creation_option": "string",
        "azure_bastion_creation_option": "string",
        "hub_network_cidr_block": "string",
        "gateway_subnet_cidr_block": "string",
        "landing_zones_mg_children": [{
            "name": "string",
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        }],
        "naming_convention_formula": "string",
        "existing_log_analytics_workspace_id": "string",
        "existing_ddos_protection_id": "string",
        "existing_azure_bastion_id": "string",
        "landing_zones_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "decommissioned_mg_metadata": {
            "create": False,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "custom_naming_convention": [{
            "formula": "string",
            "resource_type": "string",
        }],
        "azure_bastion_subnet_cidr_block": "string",
        "firewall_subnet_cidr_block": "string",
        "platform_connectivity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_identity_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_management_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "platform_mg_children": [{
            "name": "string",
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        }],
        "platform_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "sandbox_mg_metadata": {
            "create": False,
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
        "tags": [{
            "name": "string",
            "value": "string",
        }],
        "top_level_mg_metadata": {
            "policy_initiatives_assignment_properties": [{
                "assignment_parameters": "any",
                "policy_initiative_id": "string",
            }],
        },
    })
Copy
const landingZoneConfigurationOperationResource = new azure_native.sovereign.LandingZoneConfigurationOperation("landingZoneConfigurationOperationResource", {
    landingZoneAccountName: "string",
    resourceGroupName: "string",
    landingZoneConfigurationName: "string",
    properties: {
        firewallCreationOption: "string",
        managedIdentity: {
            type: "string",
            userAssignedIdentityResourceId: "string",
        },
        logRetentionInDays: 0,
        ddosProtectionCreationOption: "string",
        logAnalyticsWorkspaceCreationOption: "string",
        azureBastionCreationOption: "string",
        hubNetworkCidrBlock: "string",
        gatewaySubnetCidrBlock: "string",
        landingZonesMgChildren: [{
            name: "string",
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        }],
        namingConventionFormula: "string",
        existingLogAnalyticsWorkspaceId: "string",
        existingDdosProtectionId: "string",
        existingAzureBastionId: "string",
        landingZonesMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        decommissionedMgMetadata: {
            create: false,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        customNamingConvention: [{
            formula: "string",
            resourceType: "string",
        }],
        azureBastionSubnetCidrBlock: "string",
        firewallSubnetCidrBlock: "string",
        platformConnectivityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformIdentityMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformManagementMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        platformMgChildren: [{
            name: "string",
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        }],
        platformMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        sandboxMgMetadata: {
            create: false,
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
        tags: [{
            name: "string",
            value: "string",
        }],
        topLevelMgMetadata: {
            policyInitiativesAssignmentProperties: [{
                assignmentParameters: "any",
                policyInitiativeId: "string",
            }],
        },
    },
});
Copy
type: azure-native:sovereign:LandingZoneConfigurationOperation
properties:
    landingZoneAccountName: string
    landingZoneConfigurationName: string
    properties:
        azureBastionCreationOption: string
        azureBastionSubnetCidrBlock: string
        customNamingConvention:
            - formula: string
              resourceType: string
        ddosProtectionCreationOption: string
        decommissionedMgMetadata:
            create: false
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        existingAzureBastionId: string
        existingDdosProtectionId: string
        existingLogAnalyticsWorkspaceId: string
        firewallCreationOption: string
        firewallSubnetCidrBlock: string
        gatewaySubnetCidrBlock: string
        hubNetworkCidrBlock: string
        landingZonesMgChildren:
            - name: string
              policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        landingZonesMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        logAnalyticsWorkspaceCreationOption: string
        logRetentionInDays: 0
        managedIdentity:
            type: string
            userAssignedIdentityResourceId: string
        namingConventionFormula: string
        platformConnectivityMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformIdentityMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformManagementMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformMgChildren:
            - name: string
              policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        platformMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        sandboxMgMetadata:
            create: false
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
        tags:
            - name: string
              value: string
        topLevelMgMetadata:
            policyInitiativesAssignmentProperties:
                - assignmentParameters: any
                  policyInitiativeId: string
    resourceGroupName: string
Copy

LandingZoneConfigurationOperation Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The LandingZoneConfigurationOperation resource accepts the following input properties:

LandingZoneAccountName
This property is required.
Changes to this property will trigger replacement.
string
The landing zone account.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
LandingZoneConfigurationName Changes to this property will trigger replacement. string
The landing zone configuration name
Properties Pulumi.AzureNative.Sovereign.Inputs.LandingZoneConfigurationResourceProperties
The resource-specific properties for this resource.
LandingZoneAccountName
This property is required.
Changes to this property will trigger replacement.
string
The landing zone account.
ResourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
LandingZoneConfigurationName Changes to this property will trigger replacement. string
The landing zone configuration name
Properties LandingZoneConfigurationResourcePropertiesArgs
The resource-specific properties for this resource.
landingZoneAccountName
This property is required.
Changes to this property will trigger replacement.
String
The landing zone account.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.
landingZoneConfigurationName Changes to this property will trigger replacement. String
The landing zone configuration name
properties LandingZoneConfigurationResourceProperties
The resource-specific properties for this resource.
landingZoneAccountName
This property is required.
Changes to this property will trigger replacement.
string
The landing zone account.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
string
The name of the resource group. The name is case insensitive.
landingZoneConfigurationName Changes to this property will trigger replacement. string
The landing zone configuration name
properties LandingZoneConfigurationResourceProperties
The resource-specific properties for this resource.
landing_zone_account_name
This property is required.
Changes to this property will trigger replacement.
str
The landing zone account.
resource_group_name
This property is required.
Changes to this property will trigger replacement.
str
The name of the resource group. The name is case insensitive.
landing_zone_configuration_name Changes to this property will trigger replacement. str
The landing zone configuration name
properties LandingZoneConfigurationResourcePropertiesArgs
The resource-specific properties for this resource.
landingZoneAccountName
This property is required.
Changes to this property will trigger replacement.
String
The landing zone account.
resourceGroupName
This property is required.
Changes to this property will trigger replacement.
String
The name of the resource group. The name is case insensitive.
landingZoneConfigurationName Changes to this property will trigger replacement. String
The landing zone configuration name
properties Property Map
The resource-specific properties for this resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the LandingZoneConfigurationOperation resource produces the following output properties:

AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
The name of the resource
SystemData Pulumi.AzureNative.Sovereign.Outputs.SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
AzureApiVersion string
The Azure API version of the resource.
Id string
The provider-assigned unique ID for this managed resource.
Name string
The name of the resource
SystemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
Type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
The name of the resource
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
azureApiVersion string
The Azure API version of the resource.
id string
The provider-assigned unique ID for this managed resource.
name string
The name of the resource
systemData SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type string
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
azure_api_version str
The Azure API version of the resource.
id str
The provider-assigned unique ID for this managed resource.
name str
The name of the resource
system_data SystemDataResponse
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type str
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
azureApiVersion String
The Azure API version of the resource.
id String
The provider-assigned unique ID for this managed resource.
name String
The name of the resource
systemData Property Map
Azure Resource Manager metadata containing createdBy and modifiedBy information.
type String
The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

Supporting Types

CustomNamingConvention
, CustomNamingConventionArgs

Formula This property is required. string
The custom naming formula for the resource type.
ResourceType This property is required. string | Pulumi.AzureNative.Sovereign.ResourceType
The type of the resource.
Formula This property is required. string
The custom naming formula for the resource type.
ResourceType This property is required. string | ResourceType
The type of the resource.
formula This property is required. String
The custom naming formula for the resource type.
resourceType This property is required. String | ResourceType
The type of the resource.
formula This property is required. string
The custom naming formula for the resource type.
resourceType This property is required. string | ResourceType
The type of the resource.
formula This property is required. str
The custom naming formula for the resource type.
resource_type This property is required. str | ResourceType
The type of the resource.

CustomNamingConventionResponse
, CustomNamingConventionResponseArgs

Formula This property is required. string
The custom naming formula for the resource type.
ResourceType This property is required. string
The type of the resource.
Formula This property is required. string
The custom naming formula for the resource type.
ResourceType This property is required. string
The type of the resource.
formula This property is required. String
The custom naming formula for the resource type.
resourceType This property is required. String
The type of the resource.
formula This property is required. string
The custom naming formula for the resource type.
resourceType This property is required. string
The type of the resource.
formula This property is required. str
The custom naming formula for the resource type.
resource_type This property is required. str
The type of the resource.
formula This property is required. String
The custom naming formula for the resource type.
resourceType This property is required. String
The type of the resource.

DecommissionedManagementGroupProperties
, DecommissionedManagementGroupPropertiesArgs

Create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
Create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentProperties
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
create This property is required. boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentProperties[]
Array of policy initiatives applied to the management group.
create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentProperties]
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

DecommissionedManagementGroupPropertiesResponse
, DecommissionedManagementGroupPropertiesResponseArgs

Create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
Create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentPropertiesResponse
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
create This property is required. boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentPropertiesResponse[]
Array of policy initiatives applied to the management group.
create This property is required. bool
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentPropertiesResponse]
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Decommissioned' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

FirewallCreationOptions
, FirewallCreationOptionsArgs

None
NoneSelect 'None' value to skip Firewall deployment.
Standard
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
Premium
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
FirewallCreationOptionsNone
NoneSelect 'None' value to skip Firewall deployment.
FirewallCreationOptionsStandard
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
FirewallCreationOptionsPremium
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
None
NoneSelect 'None' value to skip Firewall deployment.
Standard
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
Premium
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
None
NoneSelect 'None' value to skip Firewall deployment.
Standard
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
Premium
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
NONE
NoneSelect 'None' value to skip Firewall deployment.
STANDARD
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
PREMIUM
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.
"None"
NoneSelect 'None' value to skip Firewall deployment.
"Standard"
StandardSelect 'Standard' value to deploy the Firewall Standard SKU.
"Premium"
PremiumSelect 'Premium' value to deploy the Firewall Premium SKU.

LandingZoneConfigurationResourceProperties
, LandingZoneConfigurationResourcePropertiesArgs

AzureBastionCreationOption This property is required. string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
DdosProtectionCreationOption This property is required. string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
FirewallCreationOption This property is required. string | Pulumi.AzureNative.Sovereign.FirewallCreationOptions
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
GatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
HubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
LogAnalyticsWorkspaceCreationOption This property is required. string | Pulumi.AzureNative.Sovereign.ResourceCreationOptions
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
LogRetentionInDays This property is required. double
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
ManagedIdentity This property is required. Pulumi.AzureNative.Sovereign.Inputs.ManagedIdentityProperties
The managed identity to be assigned to this landing zone configuration.
AzureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
CustomNamingConvention List<Pulumi.AzureNative.Sovereign.Inputs.CustomNamingConvention>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
DecommissionedMgMetadata Pulumi.AzureNative.Sovereign.Inputs.DecommissionedManagementGroupProperties
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
ExistingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
ExistingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
ExistingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
FirewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
LandingZonesMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.LandingZoneManagementGroupProperties>
The child management groups of 'Landing Zones' management group and their assigned policies.
LandingZonesMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the 'Landing Zones' management group.
NamingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
PlatformConnectivityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
PlatformIdentityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the 'Identity' management group under 'Platform' management group.
PlatformManagementMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the 'Management' management group under 'Platform' management group.
PlatformMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.PlatformManagementGroupProperties>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
PlatformMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the 'Platform' management group.
SandboxMgMetadata Pulumi.AzureNative.Sovereign.Inputs.SandboxManagementGroupProperties
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
Tags List<Pulumi.AzureNative.Sovereign.Inputs.Tags>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
TopLevelMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupProperties
The assigned policies of the parent management group.
AzureBastionCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
DdosProtectionCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
FirewallCreationOption This property is required. string | FirewallCreationOptions
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
GatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
HubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
LogAnalyticsWorkspaceCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
LogRetentionInDays This property is required. float64
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
ManagedIdentity This property is required. ManagedIdentityProperties
The managed identity to be assigned to this landing zone configuration.
AzureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
CustomNamingConvention []CustomNamingConvention
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
DecommissionedMgMetadata DecommissionedManagementGroupProperties
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
ExistingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
ExistingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
ExistingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
FirewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
LandingZonesMgChildren []LandingZoneManagementGroupProperties
The child management groups of 'Landing Zones' management group and their assigned policies.
LandingZonesMgMetadata ManagementGroupProperties
The assigned policies of the 'Landing Zones' management group.
NamingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
PlatformConnectivityMgMetadata ManagementGroupProperties
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
PlatformIdentityMgMetadata ManagementGroupProperties
The assigned policies of the 'Identity' management group under 'Platform' management group.
PlatformManagementMgMetadata ManagementGroupProperties
The assigned policies of the 'Management' management group under 'Platform' management group.
PlatformMgChildren []PlatformManagementGroupProperties
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
PlatformMgMetadata ManagementGroupProperties
The assigned policies of the 'Platform' management group.
SandboxMgMetadata SandboxManagementGroupProperties
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
Tags []Tags
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
TopLevelMgMetadata ManagementGroupProperties
The assigned policies of the parent management group.
azureBastionCreationOption This property is required. String | ResourceCreationOptions
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. String | ResourceCreationOptions
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. String | FirewallCreationOptions
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. String
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. String
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. String | ResourceCreationOptions
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. Double
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. ManagedIdentityProperties
The managed identity to be assigned to this landing zone configuration.
azureBastionSubnetCidrBlock String
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention List<CustomNamingConvention>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata DecommissionedManagementGroupProperties
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId String
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId String
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId String
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock String
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren List<LandingZoneManagementGroupProperties>
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata ManagementGroupProperties
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula String
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata ManagementGroupProperties
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata ManagementGroupProperties
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata ManagementGroupProperties
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren List<PlatformManagementGroupProperties>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata ManagementGroupProperties
The assigned policies of the 'Platform' management group.
sandboxMgMetadata SandboxManagementGroupProperties
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags List<Tags>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata ManagementGroupProperties
The assigned policies of the parent management group.
azureBastionCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. string | FirewallCreationOptions
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. string | ResourceCreationOptions
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. number
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. ManagedIdentityProperties
The managed identity to be assigned to this landing zone configuration.
azureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention CustomNamingConvention[]
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata DecommissionedManagementGroupProperties
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren LandingZoneManagementGroupProperties[]
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata ManagementGroupProperties
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata ManagementGroupProperties
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata ManagementGroupProperties
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata ManagementGroupProperties
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren PlatformManagementGroupProperties[]
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata ManagementGroupProperties
The assigned policies of the 'Platform' management group.
sandboxMgMetadata SandboxManagementGroupProperties
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags Tags[]
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata ManagementGroupProperties
The assigned policies of the parent management group.
azure_bastion_creation_option This property is required. str | ResourceCreationOptions
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddos_protection_creation_option This property is required. str | ResourceCreationOptions
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewall_creation_option This property is required. str | FirewallCreationOptions
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gateway_subnet_cidr_block This property is required. str
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hub_network_cidr_block This property is required. str
The Virtual Network address. Specify the address using IPv4 CIDR notation.
log_analytics_workspace_creation_option This property is required. str | ResourceCreationOptions
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
log_retention_in_days This property is required. float
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managed_identity This property is required. ManagedIdentityProperties
The managed identity to be assigned to this landing zone configuration.
azure_bastion_subnet_cidr_block str
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
custom_naming_convention Sequence[CustomNamingConvention]
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissioned_mg_metadata DecommissionedManagementGroupProperties
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existing_azure_bastion_id str
The resource ID of the Bastion when reusing an existing one.
existing_ddos_protection_id str
The resource ID of the DDoS protection plan when reusing an existing one.
existing_log_analytics_workspace_id str
The resource ID of the log analytics workspace when reusing an existing one.
firewall_subnet_cidr_block str
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landing_zones_mg_children Sequence[LandingZoneManagementGroupProperties]
The child management groups of 'Landing Zones' management group and their assigned policies.
landing_zones_mg_metadata ManagementGroupProperties
The assigned policies of the 'Landing Zones' management group.
naming_convention_formula str
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platform_connectivity_mg_metadata ManagementGroupProperties
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platform_identity_mg_metadata ManagementGroupProperties
The assigned policies of the 'Identity' management group under 'Platform' management group.
platform_management_mg_metadata ManagementGroupProperties
The assigned policies of the 'Management' management group under 'Platform' management group.
platform_mg_children Sequence[PlatformManagementGroupProperties]
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platform_mg_metadata ManagementGroupProperties
The assigned policies of the 'Platform' management group.
sandbox_mg_metadata SandboxManagementGroupProperties
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags Sequence[Tags]
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
top_level_mg_metadata ManagementGroupProperties
The assigned policies of the parent management group.
azureBastionCreationOption This property is required. String | "Yes" | "No" | "UseExisting"
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. String | "Yes" | "No" | "UseExisting"
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. String | "None" | "Standard" | "Premium"
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. String
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. String
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. String | "Yes" | "No" | "UseExisting"
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. Number
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. Property Map
The managed identity to be assigned to this landing zone configuration.
azureBastionSubnetCidrBlock String
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention List<Property Map>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata Property Map
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId String
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId String
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId String
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock String
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren List<Property Map>
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata Property Map
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula String
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata Property Map
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata Property Map
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata Property Map
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren List<Property Map>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata Property Map
The assigned policies of the 'Platform' management group.
sandboxMgMetadata Property Map
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags List<Property Map>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata Property Map
The assigned policies of the parent management group.

LandingZoneConfigurationResourcePropertiesResponse
, LandingZoneConfigurationResourcePropertiesResponseArgs

AuthoringStatus This property is required. string
The status that indicates the current phase of the configuration process for a deployment.
AzureBastionCreationOption This property is required. string
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
DdosProtectionCreationOption This property is required. string
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
FirewallCreationOption This property is required. string
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
GatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
HubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
LogAnalyticsWorkspaceCreationOption This property is required. string
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
LogRetentionInDays This property is required. double
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
ManagedIdentity This property is required. Pulumi.AzureNative.Sovereign.Inputs.ManagedIdentityPropertiesResponse
The managed identity to be assigned to this landing zone configuration.
ProvisioningState This property is required. string
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
AzureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
CustomNamingConvention List<Pulumi.AzureNative.Sovereign.Inputs.CustomNamingConventionResponse>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
DecommissionedMgMetadata Pulumi.AzureNative.Sovereign.Inputs.DecommissionedManagementGroupPropertiesResponse
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
ExistingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
ExistingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
ExistingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
FirewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
LandingZonesMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.LandingZoneManagementGroupPropertiesResponse>
The child management groups of 'Landing Zones' management group and their assigned policies.
LandingZonesMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the 'Landing Zones' management group.
NamingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
PlatformConnectivityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
PlatformIdentityMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the 'Identity' management group under 'Platform' management group.
PlatformManagementMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the 'Management' management group under 'Platform' management group.
PlatformMgChildren List<Pulumi.AzureNative.Sovereign.Inputs.PlatformManagementGroupPropertiesResponse>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
PlatformMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the 'Platform' management group.
SandboxMgMetadata Pulumi.AzureNative.Sovereign.Inputs.SandboxManagementGroupPropertiesResponse
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
Tags List<Pulumi.AzureNative.Sovereign.Inputs.TagsResponse>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
TopLevelMgMetadata Pulumi.AzureNative.Sovereign.Inputs.ManagementGroupPropertiesResponse
The assigned policies of the parent management group.
AuthoringStatus This property is required. string
The status that indicates the current phase of the configuration process for a deployment.
AzureBastionCreationOption This property is required. string
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
DdosProtectionCreationOption This property is required. string
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
FirewallCreationOption This property is required. string
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
GatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
HubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
LogAnalyticsWorkspaceCreationOption This property is required. string
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
LogRetentionInDays This property is required. float64
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
ManagedIdentity This property is required. ManagedIdentityPropertiesResponse
The managed identity to be assigned to this landing zone configuration.
ProvisioningState This property is required. string
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
AzureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
CustomNamingConvention []CustomNamingConventionResponse
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
DecommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
ExistingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
ExistingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
ExistingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
FirewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
LandingZonesMgChildren []LandingZoneManagementGroupPropertiesResponse
The child management groups of 'Landing Zones' management group and their assigned policies.
LandingZonesMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Landing Zones' management group.
NamingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
PlatformConnectivityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
PlatformIdentityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Identity' management group under 'Platform' management group.
PlatformManagementMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Management' management group under 'Platform' management group.
PlatformMgChildren []PlatformManagementGroupPropertiesResponse
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
PlatformMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Platform' management group.
SandboxMgMetadata SandboxManagementGroupPropertiesResponse
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
Tags []TagsResponse
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
TopLevelMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the parent management group.
authoringStatus This property is required. String
The status that indicates the current phase of the configuration process for a deployment.
azureBastionCreationOption This property is required. String
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. String
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. String
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. String
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. String
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. String
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. Double
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. ManagedIdentityPropertiesResponse
The managed identity to be assigned to this landing zone configuration.
provisioningState This property is required. String
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
azureBastionSubnetCidrBlock String
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention List<CustomNamingConventionResponse>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId String
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId String
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId String
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock String
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren List<LandingZoneManagementGroupPropertiesResponse>
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula String
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren List<PlatformManagementGroupPropertiesResponse>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Platform' management group.
sandboxMgMetadata SandboxManagementGroupPropertiesResponse
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags List<TagsResponse>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the parent management group.
authoringStatus This property is required. string
The status that indicates the current phase of the configuration process for a deployment.
azureBastionCreationOption This property is required. string
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. string
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. string
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. string
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. string
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. string
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. number
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. ManagedIdentityPropertiesResponse
The managed identity to be assigned to this landing zone configuration.
provisioningState This property is required. string
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
azureBastionSubnetCidrBlock string
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention CustomNamingConventionResponse[]
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata DecommissionedManagementGroupPropertiesResponse
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId string
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId string
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId string
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock string
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren LandingZoneManagementGroupPropertiesResponse[]
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula string
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren PlatformManagementGroupPropertiesResponse[]
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the 'Platform' management group.
sandboxMgMetadata SandboxManagementGroupPropertiesResponse
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags TagsResponse[]
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata ManagementGroupPropertiesResponse
The assigned policies of the parent management group.
authoring_status This property is required. str
The status that indicates the current phase of the configuration process for a deployment.
azure_bastion_creation_option This property is required. str
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddos_protection_creation_option This property is required. str
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewall_creation_option This property is required. str
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gateway_subnet_cidr_block This property is required. str
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hub_network_cidr_block This property is required. str
The Virtual Network address. Specify the address using IPv4 CIDR notation.
log_analytics_workspace_creation_option This property is required. str
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
log_retention_in_days This property is required. float
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managed_identity This property is required. ManagedIdentityPropertiesResponse
The managed identity to be assigned to this landing zone configuration.
provisioning_state This property is required. str
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
azure_bastion_subnet_cidr_block str
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
custom_naming_convention Sequence[CustomNamingConventionResponse]
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissioned_mg_metadata DecommissionedManagementGroupPropertiesResponse
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existing_azure_bastion_id str
The resource ID of the Bastion when reusing an existing one.
existing_ddos_protection_id str
The resource ID of the DDoS protection plan when reusing an existing one.
existing_log_analytics_workspace_id str
The resource ID of the log analytics workspace when reusing an existing one.
firewall_subnet_cidr_block str
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landing_zones_mg_children Sequence[LandingZoneManagementGroupPropertiesResponse]
The child management groups of 'Landing Zones' management group and their assigned policies.
landing_zones_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the 'Landing Zones' management group.
naming_convention_formula str
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platform_connectivity_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platform_identity_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the 'Identity' management group under 'Platform' management group.
platform_management_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the 'Management' management group under 'Platform' management group.
platform_mg_children Sequence[PlatformManagementGroupPropertiesResponse]
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platform_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the 'Platform' management group.
sandbox_mg_metadata SandboxManagementGroupPropertiesResponse
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags Sequence[TagsResponse]
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
top_level_mg_metadata ManagementGroupPropertiesResponse
The assigned policies of the parent management group.
authoringStatus This property is required. String
The status that indicates the current phase of the configuration process for a deployment.
azureBastionCreationOption This property is required. String
Parameter used to deploy a Bastion: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing Bastion.
ddosProtectionCreationOption This property is required. String
Parameter used to deploy a DDoS protection plan: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing DDoS protection plan.
firewallCreationOption This property is required. String
Parameter used for deploying a Firewall: Select 'No' to skip deployment, 'Standard' to deploy the Standard SKU, or 'Premium' to deploy the Premium SKU.
gatewaySubnetCidrBlock This property is required. String
The gateway subnet address used for deploying a virtual network. Specify the subnet using IPv4 CIDR notation.
hubNetworkCidrBlock This property is required. String
The Virtual Network address. Specify the address using IPv4 CIDR notation.
logAnalyticsWorkspaceCreationOption This property is required. String
Parameter used to deploy a log analytics workspace: Select 'Yes' to enable deployment, 'No' to skip it, or 'Existing' to reuse an existing log analytics workspace.
logRetentionInDays This property is required. Number
Parameter to define the retention period for logs, in days. The minimum duration is 30 days and the maximum is 730 days.
managedIdentity This property is required. Property Map
The managed identity to be assigned to this landing zone configuration.
provisioningState This property is required. String
The state that reflects the current stage in the creation, updating, or deletion process of the landing zone configuration.
azureBastionSubnetCidrBlock String
The Bastion subnet address. Specify the address using IPv4 CIDR notation.
customNamingConvention List<Property Map>
The custom naming convention applied to specific resource types for this landing zone configuration, which overrides the default naming convention for those resource types. Example - 'customNamingConvention': [{'resourceType': 'azureFirewalls', 'formula': '{DeploymentPrefix}-afwl-{DeploymentSuffix}'}]
decommissionedMgMetadata Property Map
The assigned policies of the 'Decommissioned' management group and indicator to create it or not.
existingAzureBastionId String
The resource ID of the Bastion when reusing an existing one.
existingDdosProtectionId String
The resource ID of the DDoS protection plan when reusing an existing one.
existingLogAnalyticsWorkspaceId String
The resource ID of the log analytics workspace when reusing an existing one.
firewallSubnetCidrBlock String
The Firewall subnet address used for deploying a firewall. Specify the Firewall subnet using IPv4 CIDR notation.
landingZonesMgChildren List<Property Map>
The child management groups of 'Landing Zones' management group and their assigned policies.
landingZonesMgMetadata Property Map
The assigned policies of the 'Landing Zones' management group.
namingConventionFormula String
The default naming convention applied to all resources for this landing zone configuration. Example - {DeploymentPrefix}-Contoso-{ResourceTypeAbbreviation}{DeploymentSuffix}-{Environment}-testing
platformConnectivityMgMetadata Property Map
The assigned policies of the 'Connectivity' management group under 'Platform' management group.
platformIdentityMgMetadata Property Map
The assigned policies of the 'Identity' management group under 'Platform' management group.
platformManagementMgMetadata Property Map
The assigned policies of the 'Management' management group under 'Platform' management group.
platformMgChildren List<Property Map>
The names of the 'Platform' child management groups and their assigned policies, excluding the default ones: 'Connectivity', 'Identity', and 'Management'
platformMgMetadata Property Map
The assigned policies of the 'Platform' management group.
sandboxMgMetadata Property Map
The assigned policies of the 'Sandbox' management group and indicator to create it or not.
tags List<Property Map>
Tags are key-value pairs that can be assigned to a resource to organize and manage it more effectively. Example: {'name': 'a tag name', 'value': 'a tag value'}
topLevelMgMetadata Property Map
The assigned policies of the parent management group.

LandingZoneManagementGroupProperties
, LandingZoneManagementGroupPropertiesArgs

Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentProperties
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
name This property is required. string
Management group name.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentProperties[]
Array of policy initiatives applied to the management group.
name This property is required. str
Management group name.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentProperties]
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

LandingZoneManagementGroupPropertiesResponse
, LandingZoneManagementGroupPropertiesResponseArgs

Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentPropertiesResponse
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
name This property is required. string
Management group name.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentPropertiesResponse[]
Array of policy initiatives applied to the management group.
name This property is required. str
Management group name.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentPropertiesResponse]
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

ManagedIdentityProperties
, ManagedIdentityPropertiesArgs

Type This property is required. string | Pulumi.AzureNative.Sovereign.ManagedIdentityResourceType
The type of managed identity.
UserAssignedIdentityResourceId string
The resource id of the managed identity.
Type This property is required. string | ManagedIdentityResourceType
The type of managed identity.
UserAssignedIdentityResourceId string
The resource id of the managed identity.
type This property is required. String | ManagedIdentityResourceType
The type of managed identity.
userAssignedIdentityResourceId String
The resource id of the managed identity.
type This property is required. string | ManagedIdentityResourceType
The type of managed identity.
userAssignedIdentityResourceId string
The resource id of the managed identity.
type This property is required. str | ManagedIdentityResourceType
The type of managed identity.
user_assigned_identity_resource_id str
The resource id of the managed identity.
type This property is required. String | "SystemAssigned" | "UserAssigned"
The type of managed identity.
userAssignedIdentityResourceId String
The resource id of the managed identity.

ManagedIdentityPropertiesResponse
, ManagedIdentityPropertiesResponseArgs

Type This property is required. string
The type of managed identity.
UserAssignedIdentityResourceId string
The resource id of the managed identity.
Type This property is required. string
The type of managed identity.
UserAssignedIdentityResourceId string
The resource id of the managed identity.
type This property is required. String
The type of managed identity.
userAssignedIdentityResourceId String
The resource id of the managed identity.
type This property is required. string
The type of managed identity.
userAssignedIdentityResourceId string
The resource id of the managed identity.
type This property is required. str
The type of managed identity.
user_assigned_identity_resource_id str
The resource id of the managed identity.
type This property is required. String
The type of managed identity.
userAssignedIdentityResourceId String
The resource id of the managed identity.

ManagedIdentityResourceType
, ManagedIdentityResourceTypeArgs

SystemAssigned
SystemAssignedSystem assigned managed identity.
UserAssigned
UserAssignedUser assigned managed identity.
ManagedIdentityResourceTypeSystemAssigned
SystemAssignedSystem assigned managed identity.
ManagedIdentityResourceTypeUserAssigned
UserAssignedUser assigned managed identity.
SystemAssigned
SystemAssignedSystem assigned managed identity.
UserAssigned
UserAssignedUser assigned managed identity.
SystemAssigned
SystemAssignedSystem assigned managed identity.
UserAssigned
UserAssignedUser assigned managed identity.
SYSTEM_ASSIGNED
SystemAssignedSystem assigned managed identity.
USER_ASSIGNED
UserAssignedUser assigned managed identity.
"SystemAssigned"
SystemAssignedSystem assigned managed identity.
"UserAssigned"
UserAssignedUser assigned managed identity.

ManagementGroupProperties
, ManagementGroupPropertiesArgs

PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentProperties
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentProperties[]
Array of policy initiatives applied to the management group.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentProperties]
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

ManagementGroupPropertiesResponse
, ManagementGroupPropertiesResponseArgs

PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentPropertiesResponse
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentPropertiesResponse[]
Array of policy initiatives applied to the management group.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentPropertiesResponse]
Array of policy initiatives applied to the management group.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

PlatformManagementGroupProperties
, PlatformManagementGroupPropertiesArgs

Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentProperties
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
name This property is required. string
Management group name.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentProperties[]
Array of policy initiatives applied to the management group.
name This property is required. str
Management group name.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentProperties]
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

PlatformManagementGroupPropertiesResponse
, PlatformManagementGroupPropertiesResponseArgs

Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
Name This property is required. string
Management group name.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentPropertiesResponse
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
name This property is required. string
Management group name.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentPropertiesResponse[]
Array of policy initiatives applied to the management group.
name This property is required. str
Management group name.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentPropertiesResponse]
Array of policy initiatives applied to the management group.
name This property is required. String
Management group name.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

PolicyInitiativeAssignmentProperties
, PolicyInitiativeAssignmentPropertiesArgs

AssignmentParameters This property is required. object
The parameters of the assigned policy initiative.
PolicyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
AssignmentParameters This property is required. interface{}
The parameters of the assigned policy initiative.
PolicyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
assignmentParameters This property is required. Object
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. String
The fully qualified id of the policy initiative.
assignmentParameters This property is required. any
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
assignment_parameters This property is required. Any
The parameters of the assigned policy initiative.
policy_initiative_id This property is required. str
The fully qualified id of the policy initiative.
assignmentParameters This property is required. Any
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. String
The fully qualified id of the policy initiative.

PolicyInitiativeAssignmentPropertiesResponse
, PolicyInitiativeAssignmentPropertiesResponseArgs

AssignmentParameters This property is required. object
The parameters of the assigned policy initiative.
PolicyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
AssignmentParameters This property is required. interface{}
The parameters of the assigned policy initiative.
PolicyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
assignmentParameters This property is required. Object
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. String
The fully qualified id of the policy initiative.
assignmentParameters This property is required. any
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. string
The fully qualified id of the policy initiative.
assignment_parameters This property is required. Any
The parameters of the assigned policy initiative.
policy_initiative_id This property is required. str
The fully qualified id of the policy initiative.
assignmentParameters This property is required. Any
The parameters of the assigned policy initiative.
policyInitiativeId This property is required. String
The fully qualified id of the policy initiative.

ResourceCreationOptions
, ResourceCreationOptionsArgs

Yes
YesValue to create a new resource.
No
NoValue to not create a new resource.
UseExisting
UseExistingValue to use an existing resource.
ResourceCreationOptionsYes
YesValue to create a new resource.
ResourceCreationOptionsNo
NoValue to not create a new resource.
ResourceCreationOptionsUseExisting
UseExistingValue to use an existing resource.
Yes
YesValue to create a new resource.
No
NoValue to not create a new resource.
UseExisting
UseExistingValue to use an existing resource.
Yes
YesValue to create a new resource.
No
NoValue to not create a new resource.
UseExisting
UseExistingValue to use an existing resource.
YES
YesValue to create a new resource.
NO
NoValue to not create a new resource.
USE_EXISTING
UseExistingValue to use an existing resource.
"Yes"
YesValue to create a new resource.
"No"
NoValue to not create a new resource.
"UseExisting"
UseExistingValue to use an existing resource.

ResourceType
, ResourceTypeArgs

AzureFirewalls
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
Workspaces
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
AutomationAccounts
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
Dashboards
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
UserAssignedIdentities
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
BastionHosts
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
DdosProtectionPlans
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
NetworkSecurityGroups
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
VirtualNetworks
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
RouteTables
routeTablesValue when customer wants to provide a custom naming convention for route table.
ResourceTypeAzureFirewalls
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
ResourceTypeWorkspaces
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
ResourceTypeAutomationAccounts
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
ResourceTypeDashboards
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
ResourceTypeUserAssignedIdentities
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
ResourceTypeBastionHosts
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
ResourceTypeDdosProtectionPlans
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
ResourceTypeNetworkSecurityGroups
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
ResourceTypeVirtualNetworks
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
ResourceTypeRouteTables
routeTablesValue when customer wants to provide a custom naming convention for route table.
AzureFirewalls
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
Workspaces
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
AutomationAccounts
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
Dashboards
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
UserAssignedIdentities
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
BastionHosts
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
DdosProtectionPlans
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
NetworkSecurityGroups
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
VirtualNetworks
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
RouteTables
routeTablesValue when customer wants to provide a custom naming convention for route table.
AzureFirewalls
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
Workspaces
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
AutomationAccounts
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
Dashboards
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
UserAssignedIdentities
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
BastionHosts
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
DdosProtectionPlans
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
NetworkSecurityGroups
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
VirtualNetworks
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
RouteTables
routeTablesValue when customer wants to provide a custom naming convention for route table.
AZURE_FIREWALLS
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
WORKSPACES
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
AUTOMATION_ACCOUNTS
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
DASHBOARDS
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
USER_ASSIGNED_IDENTITIES
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
BASTION_HOSTS
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
DDOS_PROTECTION_PLANS
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
NETWORK_SECURITY_GROUPS
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
VIRTUAL_NETWORKS
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
ROUTE_TABLES
routeTablesValue when customer wants to provide a custom naming convention for route table.
"azureFirewalls"
azureFirewallsValue when customer wants to provide a custom naming convention for Azure Firewall.
"workspaces"
workspacesValue when customer wants to provide a custom naming convention for Log Analytics workspace.
"automationAccounts"
automationAccountsValue when customer wants to provide a custom naming convention for automation account.
"dashboards"
dashboardsValue when customer wants to provide a custom naming convention for dashboard.
"userAssignedIdentities"
userAssignedIdentitiesValue when customer wants to provide a custom naming convention for managed identity.
"bastionHosts"
bastionHostsValue when customer wants to provide a custom naming convention for Bastion.
"ddosProtectionPlans"
ddosProtectionPlansValue when customer wants to provide a custom naming convention for DDoS protection plan.
"networkSecurityGroups"
networkSecurityGroupsValue when customer wants to provide a custom naming convention for Bastion NSG.
"virtualNetworks"
virtualNetworksValue when customer wants to provide a custom naming convention for virtual network.
"routeTables"
routeTablesValue when customer wants to provide a custom naming convention for route table.

SandboxManagementGroupProperties
, SandboxManagementGroupPropertiesArgs

Create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
Create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentProperties
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentProperties>
Array of policy initiatives applied to the management group.
create This property is required. boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentProperties[]
Array of policy initiatives applied to the management group.
create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentProperties]
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

SandboxManagementGroupPropertiesResponse
, SandboxManagementGroupPropertiesResponseArgs

Create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. List<Pulumi.AzureNative.Sovereign.Inputs.PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
Create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
PolicyInitiativesAssignmentProperties This property is required. []PolicyInitiativeAssignmentPropertiesResponse
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<PolicyInitiativeAssignmentPropertiesResponse>
Array of policy initiatives applied to the management group.
create This property is required. boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. PolicyInitiativeAssignmentPropertiesResponse[]
Array of policy initiatives applied to the management group.
create This property is required. bool
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policy_initiatives_assignment_properties This property is required. Sequence[PolicyInitiativeAssignmentPropertiesResponse]
Array of policy initiatives applied to the management group.
create This property is required. Boolean
This parameter determines whether the 'Sandbox' management group will be created. If set to true, the group will be created; if set to false, it will not be created. The default value is false.
policyInitiativesAssignmentProperties This property is required. List<Property Map>
Array of policy initiatives applied to the management group.

SystemDataResponse
, SystemDataResponseArgs

CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
CreatedAt string
The timestamp of resource creation (UTC).
CreatedBy string
The identity that created the resource.
CreatedByType string
The type of identity that created the resource.
LastModifiedAt string
The timestamp of resource last modification (UTC)
LastModifiedBy string
The identity that last modified the resource.
LastModifiedByType string
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.
createdAt string
The timestamp of resource creation (UTC).
createdBy string
The identity that created the resource.
createdByType string
The type of identity that created the resource.
lastModifiedAt string
The timestamp of resource last modification (UTC)
lastModifiedBy string
The identity that last modified the resource.
lastModifiedByType string
The type of identity that last modified the resource.
created_at str
The timestamp of resource creation (UTC).
created_by str
The identity that created the resource.
created_by_type str
The type of identity that created the resource.
last_modified_at str
The timestamp of resource last modification (UTC)
last_modified_by str
The identity that last modified the resource.
last_modified_by_type str
The type of identity that last modified the resource.
createdAt String
The timestamp of resource creation (UTC).
createdBy String
The identity that created the resource.
createdByType String
The type of identity that created the resource.
lastModifiedAt String
The timestamp of resource last modification (UTC)
lastModifiedBy String
The identity that last modified the resource.
lastModifiedByType String
The type of identity that last modified the resource.

Tags
, TagsArgs

Name This property is required. string
A tag name.
Value string
A tag value.
Name This property is required. string
A tag name.
Value string
A tag value.
name This property is required. String
A tag name.
value String
A tag value.
name This property is required. string
A tag name.
value string
A tag value.
name This property is required. str
A tag name.
value str
A tag value.
name This property is required. String
A tag name.
value String
A tag value.

TagsResponse
, TagsResponseArgs

Name This property is required. string
A tag name.
Value string
A tag value.
Name This property is required. string
A tag name.
Value string
A tag value.
name This property is required. String
A tag name.
value String
A tag value.
name This property is required. string
A tag name.
value string
A tag value.
name This property is required. str
A tag name.
value str
A tag value.
name This property is required. String
A tag name.
value String
A tag value.

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:sovereign:LandingZoneConfigurationOperation lzc-RemApiExample /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Sovereign/landingZoneAccounts/{landingZoneAccountName}/landingZoneConfigurations/{landingZoneConfigurationName} 
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
Azure Native pulumi/pulumi-azure-native
License
Apache-2.0