keyvault

type AccessPolicy struct {
	pulumi.CustomResourceState

	// The object ID of an Application in Azure Active Directory.
	ApplicationId pulumi.StringPtrOutput `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from
	// the following: `backup`, `create`, `delete`, `deleteissuers`, `get`, `getissuers`, `import`, `list`, `listissuers`,
	// `managecontacts`, `manageissuers`, `purge`, `recover`, `restore`, `setissuers` and `update`.
	CertificatePermissions pulumi.StringArrayOutput `pulumi:"certificatePermissions"`
	// List of key permissions, must be one or more from
	// the following: `backup`, `create`, `decrypt`, `delete`, `encrypt`, `get`, `import`, `list`, `purge`,
	// `recover`, `restore`, `sign`, `unwrapKey`, `update`, `verify` and `wrapKey`.
	KeyPermissions pulumi.StringArrayOutput `pulumi:"keyPermissions"`
	// Specifies the id of the Key Vault resource. Changing this
	// forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The object ID of a user, service principal or security
	// group in the Azure Active Directory tenant for the vault. The object ID must
	// be unique for the list of access policies. Changing this forces a new resource
	// to be created.
	ObjectId pulumi.StringOutput `pulumi:"objectId"`
	// List of secret permissions, must be one or more
	// from the following: `backup`, `delete`, `get`, `list`, `purge`, `recover`, `restore` and `set`.
	SecretPermissions pulumi.StringArrayOutput `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `backup`, `delete`, `deletesas`, `get`, `getsas`, `list`, `listsas`, `purge`, `recover`, `regeneratekey`, `restore`, `set`, `setsas` and `update`.
	StoragePermissions pulumi.StringArrayOutput `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used
	// for authenticating requests to the key vault. Changing this forces a new resource
	// to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

type AccessPolicyArgs struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId pulumi.StringPtrInput
	// List of certificate permissions, must be one or more from
	// the following: `backup`, `create`, `delete`, `deleteissuers`, `get`, `getissuers`, `import`, `list`, `listissuers`,
	// `managecontacts`, `manageissuers`, `purge`, `recover`, `restore`, `setissuers` and `update`.
	CertificatePermissions pulumi.StringArrayInput
	// List of key permissions, must be one or more from
	// the following: `backup`, `create`, `decrypt`, `delete`, `encrypt`, `get`, `import`, `list`, `purge`,
	// `recover`, `restore`, `sign`, `unwrapKey`, `update`, `verify` and `wrapKey`.
	KeyPermissions pulumi.StringArrayInput
	// Specifies the id of the Key Vault resource. Changing this
	// forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// The object ID of a user, service principal or security
	// group in the Azure Active Directory tenant for the vault. The object ID must
	// be unique for the list of access policies. Changing this forces a new resource
	// to be created.
	ObjectId pulumi.StringInput
	// List of secret permissions, must be one or more
	// from the following: `backup`, `delete`, `get`, `list`, `purge`, `recover`, `restore` and `set`.
	SecretPermissions pulumi.StringArrayInput
	// List of storage permissions, must be one or more from the following: `backup`, `delete`, `deletesas`, `get`, `getsas`, `list`, `listsas`, `purge`, `recover`, `regeneratekey`, `restore`, `set`, `setsas` and `update`.
	StoragePermissions pulumi.StringArrayInput
	// The Azure Active Directory tenant ID that should be used
	// for authenticating requests to the key vault. Changing this forces a new resource
	// to be created.
	TenantId pulumi.StringInput
}

type AccessPolicyState struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId pulumi.StringPtrInput
	// List of certificate permissions, must be one or more from
	// the following: `backup`, `create`, `delete`, `deleteissuers`, `get`, `getissuers`, `import`, `list`, `listissuers`,
	// `managecontacts`, `manageissuers`, `purge`, `recover`, `restore`, `setissuers` and `update`.
	CertificatePermissions pulumi.StringArrayInput
	// List of key permissions, must be one or more from
	// the following: `backup`, `create`, `decrypt`, `delete`, `encrypt`, `get`, `import`, `list`, `purge`,
	// `recover`, `restore`, `sign`, `unwrapKey`, `update`, `verify` and `wrapKey`.
	KeyPermissions pulumi.StringArrayInput
	// Specifies the id of the Key Vault resource. Changing this
	// forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The object ID of a user, service principal or security
	// group in the Azure Active Directory tenant for the vault. The object ID must
	// be unique for the list of access policies. Changing this forces a new resource
	// to be created.
	ObjectId pulumi.StringPtrInput
	// List of secret permissions, must be one or more
	// from the following: `backup`, `delete`, `get`, `list`, `purge`, `recover`, `restore` and `set`.
	SecretPermissions pulumi.StringArrayInput
	// List of storage permissions, must be one or more from the following: `backup`, `delete`, `deletesas`, `get`, `getsas`, `list`, `listsas`, `purge`, `recover`, `regeneratekey`, `restore`, `set`, `setsas` and `update`.
	StoragePermissions pulumi.StringArrayInput
	// The Azure Active Directory tenant ID that should be used
	// for authenticating requests to the key vault. Changing this forces a new resource
	// to be created.
	TenantId pulumi.StringPtrInput
}

type Certifiate struct {
	pulumi.CustomResourceState

	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertifiateCertificatePtrOutput `pulumi:"certificate"`
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringOutput `pulumi:"certificateData"`
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertifiateCertificatePolicyOutput `pulumi:"certificatePolicy"`
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringOutput `pulumi:"secretId"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringOutput `pulumi:"thumbprint"`
	// The current version of the Key Vault Certificate.
	Version pulumi.StringOutput `pulumi:"version"`
}

type CertifiateArgs struct {
	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertifiateCertificatePtrInput
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertifiateCertificatePolicyInput
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

type CertifiateCertificate struct {
	// The base64-encoded certificate contents. Changing this forces a new resource to be created.
	Contents string `pulumi:"contents"`
	// The password associated with the certificate. Changing this forces a new resource to be created.
	Password *string `pulumi:"password"`
}

type CertifiateCertificateArgs struct {
	// The base64-encoded certificate contents. Changing this forces a new resource to be created.
	Contents pulumi.StringInput `pulumi:"contents"`
	// The password associated with the certificate. Changing this forces a new resource to be created.
	Password pulumi.StringPtrInput `pulumi:"password"`
}

type CertifiateCertificateInput interface {
	pulumi.Input

	ToCertifiateCertificateOutput() CertifiateCertificateOutput
	ToCertifiateCertificateOutputWithContext(context.Context) CertifiateCertificateOutput
}

type CertifiateCertificateOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicy struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertifiateCertificatePolicyIssuerParameters `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertifiateCertificatePolicyKeyProperties `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions []CertifiateCertificatePolicyLifetimeAction `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertifiateCertificatePolicySecretProperties `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below.
	X509CertificateProperties *CertifiateCertificatePolicyX509CertificateProperties `pulumi:"x509CertificateProperties"`
}

type CertifiateCertificatePolicyArgs struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertifiateCertificatePolicyIssuerParametersInput `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertifiateCertificatePolicyKeyPropertiesInput `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions CertifiateCertificatePolicyLifetimeActionArrayInput `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertifiateCertificatePolicySecretPropertiesInput `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below.
	X509CertificateProperties CertifiateCertificatePolicyX509CertificatePropertiesPtrInput `pulumi:"x509CertificateProperties"`
}

type CertifiateCertificatePolicyInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyOutput() CertifiateCertificatePolicyOutput
	ToCertifiateCertificatePolicyOutputWithContext(context.Context) CertifiateCertificatePolicyOutput
}

type CertifiateCertificatePolicyIssuerParameters struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones). Changing this forces a new resource to be created.
	Name string `pulumi:"name"`
}

type CertifiateCertificatePolicyIssuerParametersArgs struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones). Changing this forces a new resource to be created.
	Name pulumi.StringInput `pulumi:"name"`
}

type CertifiateCertificatePolicyIssuerParametersInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyIssuerParametersOutput() CertifiateCertificatePolicyIssuerParametersOutput
	ToCertifiateCertificatePolicyIssuerParametersOutputWithContext(context.Context) CertifiateCertificatePolicyIssuerParametersOutput
}

type CertifiateCertificatePolicyIssuerParametersOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyKeyProperties struct {
	// Is this Certificate Exportable? Changing this forces a new resource to be created.
	Exportable bool `pulumi:"exportable"`
	// The size of the Key used in the Certificate. Possible values include `2048` and `4096`. Changing this forces a new resource to be created.
	KeySize int `pulumi:"keySize"`
	// Specifies the Type of Key, such as `RSA`. Changing this forces a new resource to be created.
	KeyType string `pulumi:"keyType"`
	// Is the key reusable? Changing this forces a new resource to be created.
	ReuseKey bool `pulumi:"reuseKey"`
}

type CertifiateCertificatePolicyKeyPropertiesArgs struct {
	// Is this Certificate Exportable? Changing this forces a new resource to be created.
	Exportable pulumi.BoolInput `pulumi:"exportable"`
	// The size of the Key used in the Certificate. Possible values include `2048` and `4096`. Changing this forces a new resource to be created.
	KeySize pulumi.IntInput `pulumi:"keySize"`
	// Specifies the Type of Key, such as `RSA`. Changing this forces a new resource to be created.
	KeyType pulumi.StringInput `pulumi:"keyType"`
	// Is the key reusable? Changing this forces a new resource to be created.
	ReuseKey pulumi.BoolInput `pulumi:"reuseKey"`
}

type CertifiateCertificatePolicyKeyPropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyKeyPropertiesOutput() CertifiateCertificatePolicyKeyPropertiesOutput
	ToCertifiateCertificatePolicyKeyPropertiesOutputWithContext(context.Context) CertifiateCertificatePolicyKeyPropertiesOutput
}

type CertifiateCertificatePolicyKeyPropertiesOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyLifetimeAction struct {
	// A `action` block as defined below.
	Action CertifiateCertificatePolicyLifetimeActionAction `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertifiateCertificatePolicyLifetimeActionTrigger `pulumi:"trigger"`
}

type CertifiateCertificatePolicyLifetimeActionAction struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`. Changing this forces a new resource to be created.
	ActionType string `pulumi:"actionType"`
}

type CertifiateCertificatePolicyLifetimeActionActionArgs struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`. Changing this forces a new resource to be created.
	ActionType pulumi.StringInput `pulumi:"actionType"`
}

type CertifiateCertificatePolicyLifetimeActionActionInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionActionOutput() CertifiateCertificatePolicyLifetimeActionActionOutput
	ToCertifiateCertificatePolicyLifetimeActionActionOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionActionOutput
}

type CertifiateCertificatePolicyLifetimeActionActionOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyLifetimeActionArgs struct {
	// A `action` block as defined below.
	Action CertifiateCertificatePolicyLifetimeActionActionInput `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertifiateCertificatePolicyLifetimeActionTriggerInput `pulumi:"trigger"`
}

type CertifiateCertificatePolicyLifetimeActionArray []CertifiateCertificatePolicyLifetimeActionInput

type CertifiateCertificatePolicyLifetimeActionArrayInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionArrayOutput() CertifiateCertificatePolicyLifetimeActionArrayOutput
	ToCertifiateCertificatePolicyLifetimeActionArrayOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionArrayOutput
}

type CertifiateCertificatePolicyLifetimeActionArrayOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyLifetimeActionInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionOutput() CertifiateCertificatePolicyLifetimeActionOutput
	ToCertifiateCertificatePolicyLifetimeActionOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionOutput
}

type CertifiateCertificatePolicyLifetimeActionOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyLifetimeActionTrigger struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry *int `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage *int `pulumi:"lifetimePercentage"`
}

type CertifiateCertificatePolicyLifetimeActionTriggerArgs struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry pulumi.IntPtrInput `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage pulumi.IntPtrInput `pulumi:"lifetimePercentage"`
}

type CertifiateCertificatePolicyLifetimeActionTriggerInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyLifetimeActionTriggerOutput() CertifiateCertificatePolicyLifetimeActionTriggerOutput
	ToCertifiateCertificatePolicyLifetimeActionTriggerOutputWithContext(context.Context) CertifiateCertificatePolicyLifetimeActionTriggerOutput
}

type CertifiateCertificatePolicyLifetimeActionTriggerOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyPtrOutput() CertifiateCertificatePolicyPtrOutput
	ToCertifiateCertificatePolicyPtrOutputWithContext(context.Context) CertifiateCertificatePolicyPtrOutput
}

type CertifiateCertificatePolicyPtrOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicySecretProperties struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM. Changing this forces a new resource to be created.
	ContentType string `pulumi:"contentType"`
}

type CertifiateCertificatePolicySecretPropertiesArgs struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM. Changing this forces a new resource to be created.
	ContentType pulumi.StringInput `pulumi:"contentType"`
}

type CertifiateCertificatePolicySecretPropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicySecretPropertiesOutput() CertifiateCertificatePolicySecretPropertiesOutput
	ToCertifiateCertificatePolicySecretPropertiesOutputWithContext(context.Context) CertifiateCertificatePolicySecretPropertiesOutput
}

type CertifiateCertificatePolicySecretPropertiesOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyX509CertificateProperties struct {
	// A list of Extended/Enhanced Key Usages. Changing this forces a new resource to be created.
	ExtendedKeyUsages []string `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive. Changing this forces a new resource to be created.
	KeyUsages []string `pulumi:"keyUsages"`
	// The Certificate's Subject. Changing this forces a new resource to be created.
	Subject string `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames *CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months. Changing this forces a new resource to be created.
	ValidityInMonths int `pulumi:"validityInMonths"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesArgs struct {
	// A list of Extended/Enhanced Key Usages. Changing this forces a new resource to be created.
	ExtendedKeyUsages pulumi.StringArrayInput `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive. Changing this forces a new resource to be created.
	KeyUsages pulumi.StringArrayInput `pulumi:"keyUsages"`
	// The Certificate's Subject. Changing this forces a new resource to be created.
	Subject pulumi.StringInput `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months. Changing this forces a new resource to be created.
	ValidityInMonths pulumi.IntInput `pulumi:"validityInMonths"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesOutput() CertifiateCertificatePolicyX509CertificatePropertiesOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesOutput
}

type CertifiateCertificatePolicyX509CertificatePropertiesOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyX509CertificatePropertiesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutput() CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput
}

type CertifiateCertificatePolicyX509CertificatePropertiesPtrOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate. Changing this forces a new resource to be created.
	DnsNames []string `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate. Changing this forces a new resource to be created.
	Emails []string `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate. Changing this forces a new resource to be created.
	Upns []string `pulumi:"upns"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate. Changing this forces a new resource to be created.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate. Changing this forces a new resource to be created.
	Emails pulumi.StringArrayInput `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate. Changing this forces a new resource to be created.
	Upns pulumi.StringArrayInput `pulumi:"upns"`
}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput() CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput() CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
	ToCertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext(context.Context) CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
}

type CertifiateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput struct{ *pulumi.OutputState }

type CertifiateCertificatePtrInput interface {
	pulumi.Input

	ToCertifiateCertificatePtrOutput() CertifiateCertificatePtrOutput
	ToCertifiateCertificatePtrOutputWithContext(context.Context) CertifiateCertificatePtrOutput
}

type CertifiateCertificatePtrOutput struct{ *pulumi.OutputState }

type CertifiateState struct {
	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertifiateCertificatePtrInput
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringPtrInput
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertifiateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringPtrInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringPtrInput
	// The current version of the Key Vault Certificate.
	Version pulumi.StringPtrInput
}

type Certificate struct {
	pulumi.CustomResourceState

	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertificateCertificatePtrOutput `pulumi:"certificate"`
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringOutput `pulumi:"certificateData"`
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertificateCertificatePolicyOutput `pulumi:"certificatePolicy"`
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringOutput `pulumi:"secretId"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringOutput `pulumi:"thumbprint"`
	// The current version of the Key Vault Certificate.
	Version pulumi.StringOutput `pulumi:"version"`
}

type CertificateArgs struct {
	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertificateCertificatePtrInput
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertificateCertificatePolicyInput
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

type CertificateCertificate struct {
	// The base64-encoded certificate contents. Changing this forces a new resource to be created.
	Contents string `pulumi:"contents"`
	// The password associated with the certificate. Changing this forces a new resource to be created.
	Password *string `pulumi:"password"`
}

type CertificateCertificateArgs struct {
	// The base64-encoded certificate contents. Changing this forces a new resource to be created.
	Contents pulumi.StringInput `pulumi:"contents"`
	// The password associated with the certificate. Changing this forces a new resource to be created.
	Password pulumi.StringPtrInput `pulumi:"password"`
}

type CertificateCertificateInput interface {
	pulumi.Input

	ToCertificateCertificateOutput() CertificateCertificateOutput
	ToCertificateCertificateOutputWithContext(context.Context) CertificateCertificateOutput
}

type CertificateCertificateOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicy struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertificateCertificatePolicyIssuerParameters `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertificateCertificatePolicyKeyProperties `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions []CertificateCertificatePolicyLifetimeAction `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertificateCertificatePolicySecretProperties `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below.
	X509CertificateProperties *CertificateCertificatePolicyX509CertificateProperties `pulumi:"x509CertificateProperties"`
}

type CertificateCertificatePolicyArgs struct {
	// A `issuerParameters` block as defined below.
	IssuerParameters CertificateCertificatePolicyIssuerParametersInput `pulumi:"issuerParameters"`
	// A `keyProperties` block as defined below.
	KeyProperties CertificateCertificatePolicyKeyPropertiesInput `pulumi:"keyProperties"`
	// A `lifetimeAction` block as defined below.
	LifetimeActions CertificateCertificatePolicyLifetimeActionArrayInput `pulumi:"lifetimeActions"`
	// A `secretProperties` block as defined below.
	SecretProperties CertificateCertificatePolicySecretPropertiesInput `pulumi:"secretProperties"`
	// A `x509CertificateProperties` block as defined below.
	X509CertificateProperties CertificateCertificatePolicyX509CertificatePropertiesPtrInput `pulumi:"x509CertificateProperties"`
}

type CertificateCertificatePolicyInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyOutput() CertificateCertificatePolicyOutput
	ToCertificateCertificatePolicyOutputWithContext(context.Context) CertificateCertificatePolicyOutput
}

type CertificateCertificatePolicyIssuerParameters struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones). Changing this forces a new resource to be created.
	Name string `pulumi:"name"`
}

type CertificateCertificatePolicyIssuerParametersArgs struct {
	// The name of the Certificate Issuer. Possible values include `Self` (for self-signed certificate), or `Unknown` (for a certificate issuing authority like `Let's Encrypt` and Azure direct supported ones). Changing this forces a new resource to be created.
	Name pulumi.StringInput `pulumi:"name"`
}

type CertificateCertificatePolicyIssuerParametersInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyIssuerParametersOutput() CertificateCertificatePolicyIssuerParametersOutput
	ToCertificateCertificatePolicyIssuerParametersOutputWithContext(context.Context) CertificateCertificatePolicyIssuerParametersOutput
}

type CertificateCertificatePolicyIssuerParametersOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyKeyProperties struct {
	// Is this Certificate Exportable? Changing this forces a new resource to be created.
	Exportable bool `pulumi:"exportable"`
	// The size of the Key used in the Certificate. Possible values include `2048` and `4096`. Changing this forces a new resource to be created.
	KeySize int `pulumi:"keySize"`
	// Specifies the Type of Key, such as `RSA`. Changing this forces a new resource to be created.
	KeyType string `pulumi:"keyType"`
	// Is the key reusable? Changing this forces a new resource to be created.
	ReuseKey bool `pulumi:"reuseKey"`
}

type CertificateCertificatePolicyKeyPropertiesArgs struct {
	// Is this Certificate Exportable? Changing this forces a new resource to be created.
	Exportable pulumi.BoolInput `pulumi:"exportable"`
	// The size of the Key used in the Certificate. Possible values include `2048` and `4096`. Changing this forces a new resource to be created.
	KeySize pulumi.IntInput `pulumi:"keySize"`
	// Specifies the Type of Key, such as `RSA`. Changing this forces a new resource to be created.
	KeyType pulumi.StringInput `pulumi:"keyType"`
	// Is the key reusable? Changing this forces a new resource to be created.
	ReuseKey pulumi.BoolInput `pulumi:"reuseKey"`
}

type CertificateCertificatePolicyKeyPropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyKeyPropertiesOutput() CertificateCertificatePolicyKeyPropertiesOutput
	ToCertificateCertificatePolicyKeyPropertiesOutputWithContext(context.Context) CertificateCertificatePolicyKeyPropertiesOutput
}

type CertificateCertificatePolicyKeyPropertiesOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyLifetimeAction struct {
	// A `action` block as defined below.
	Action CertificateCertificatePolicyLifetimeActionAction `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertificateCertificatePolicyLifetimeActionTrigger `pulumi:"trigger"`
}

type CertificateCertificatePolicyLifetimeActionAction struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`. Changing this forces a new resource to be created.
	ActionType string `pulumi:"actionType"`
}

type CertificateCertificatePolicyLifetimeActionActionArgs struct {
	// The Type of action to be performed when the lifetime trigger is triggerec. Possible values include `AutoRenew` and `EmailContacts`. Changing this forces a new resource to be created.
	ActionType pulumi.StringInput `pulumi:"actionType"`
}

type CertificateCertificatePolicyLifetimeActionActionInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionActionOutput() CertificateCertificatePolicyLifetimeActionActionOutput
	ToCertificateCertificatePolicyLifetimeActionActionOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionActionOutput
}

type CertificateCertificatePolicyLifetimeActionActionOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyLifetimeActionArgs struct {
	// A `action` block as defined below.
	Action CertificateCertificatePolicyLifetimeActionActionInput `pulumi:"action"`
	// A `trigger` block as defined below.
	Trigger CertificateCertificatePolicyLifetimeActionTriggerInput `pulumi:"trigger"`
}

type CertificateCertificatePolicyLifetimeActionArray []CertificateCertificatePolicyLifetimeActionInput

type CertificateCertificatePolicyLifetimeActionArrayInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionArrayOutput() CertificateCertificatePolicyLifetimeActionArrayOutput
	ToCertificateCertificatePolicyLifetimeActionArrayOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionArrayOutput
}

type CertificateCertificatePolicyLifetimeActionArrayOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyLifetimeActionInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionOutput() CertificateCertificatePolicyLifetimeActionOutput
	ToCertificateCertificatePolicyLifetimeActionOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionOutput
}

type CertificateCertificatePolicyLifetimeActionOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyLifetimeActionTrigger struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry *int `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage *int `pulumi:"lifetimePercentage"`
}

type CertificateCertificatePolicyLifetimeActionTriggerArgs struct {
	// The number of days before the Certificate expires that the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `lifetimePercentage`.
	DaysBeforeExpiry pulumi.IntPtrInput `pulumi:"daysBeforeExpiry"`
	// The percentage at which during the Certificates Lifetime the action associated with this Trigger should run. Changing this forces a new resource to be created. Conflicts with `daysBeforeExpiry`.
	LifetimePercentage pulumi.IntPtrInput `pulumi:"lifetimePercentage"`
}

type CertificateCertificatePolicyLifetimeActionTriggerInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyLifetimeActionTriggerOutput() CertificateCertificatePolicyLifetimeActionTriggerOutput
	ToCertificateCertificatePolicyLifetimeActionTriggerOutputWithContext(context.Context) CertificateCertificatePolicyLifetimeActionTriggerOutput
}

type CertificateCertificatePolicyLifetimeActionTriggerOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyPtrOutput() CertificateCertificatePolicyPtrOutput
	ToCertificateCertificatePolicyPtrOutputWithContext(context.Context) CertificateCertificatePolicyPtrOutput
}

type CertificateCertificatePolicyPtrOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicySecretProperties struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM. Changing this forces a new resource to be created.
	ContentType string `pulumi:"contentType"`
}

type CertificateCertificatePolicySecretPropertiesArgs struct {
	// The Content-Type of the Certificate, such as `application/x-pkcs12` for a PFX or `application/x-pem-file` for a PEM. Changing this forces a new resource to be created.
	ContentType pulumi.StringInput `pulumi:"contentType"`
}

type CertificateCertificatePolicySecretPropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicySecretPropertiesOutput() CertificateCertificatePolicySecretPropertiesOutput
	ToCertificateCertificatePolicySecretPropertiesOutputWithContext(context.Context) CertificateCertificatePolicySecretPropertiesOutput
}

type CertificateCertificatePolicySecretPropertiesOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyX509CertificateProperties struct {
	// A list of Extended/Enhanced Key Usages. Changing this forces a new resource to be created.
	ExtendedKeyUsages []string `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive. Changing this forces a new resource to be created.
	KeyUsages []string `pulumi:"keyUsages"`
	// The Certificate's Subject. Changing this forces a new resource to be created.
	Subject string `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames *CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months. Changing this forces a new resource to be created.
	ValidityInMonths int `pulumi:"validityInMonths"`
}

type CertificateCertificatePolicyX509CertificatePropertiesArgs struct {
	// A list of Extended/Enhanced Key Usages. Changing this forces a new resource to be created.
	ExtendedKeyUsages pulumi.StringArrayInput `pulumi:"extendedKeyUsages"`
	// A list of uses associated with this Key. Possible values include `cRLSign`, `dataEncipherment`, `decipherOnly`, `digitalSignature`, `encipherOnly`, `keyAgreement`, `keyCertSign`, `keyEncipherment` and `nonRepudiation` and are case-sensitive. Changing this forces a new resource to be created.
	KeyUsages pulumi.StringArrayInput `pulumi:"keyUsages"`
	// The Certificate's Subject. Changing this forces a new resource to be created.
	Subject pulumi.StringInput `pulumi:"subject"`
	// A `subjectAlternativeNames` block as defined below.
	SubjectAlternativeNames CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput `pulumi:"subjectAlternativeNames"`
	// The Certificates Validity Period in Months. Changing this forces a new resource to be created.
	ValidityInMonths pulumi.IntInput `pulumi:"validityInMonths"`
}

type CertificateCertificatePolicyX509CertificatePropertiesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesOutput() CertificateCertificatePolicyX509CertificatePropertiesOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesOutput
}

type CertificateCertificatePolicyX509CertificatePropertiesOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyX509CertificatePropertiesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutput() CertificateCertificatePolicyX509CertificatePropertiesPtrOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesPtrOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesPtrOutput
}

type CertificateCertificatePolicyX509CertificatePropertiesPtrOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNames struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate. Changing this forces a new resource to be created.
	DnsNames []string `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate. Changing this forces a new resource to be created.
	Emails []string `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate. Changing this forces a new resource to be created.
	Upns []string `pulumi:"upns"`
}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesArgs struct {
	// A list of alternative DNS names (FQDNs) identified by the Certificate. Changing this forces a new resource to be created.
	DnsNames pulumi.StringArrayInput `pulumi:"dnsNames"`
	// A list of email addresses identified by this Certificate. Changing this forces a new resource to be created.
	Emails pulumi.StringArrayInput `pulumi:"emails"`
	// A list of User Principal Names identified by the Certificate. Changing this forces a new resource to be created.
	Upns pulumi.StringArrayInput `pulumi:"upns"`
}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput() CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput
}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesOutput struct{ *pulumi.OutputState }

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrInput interface {
	pulumi.Input

	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput() CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
	ToCertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutputWithContext(context.Context) CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput
}

type CertificateCertificatePolicyX509CertificatePropertiesSubjectAlternativeNamesPtrOutput struct{ *pulumi.OutputState }

type CertificateCertificatePtrInput interface {
	pulumi.Input

	ToCertificateCertificatePtrOutput() CertificateCertificatePtrOutput
	ToCertificateCertificatePtrOutputWithContext(context.Context) CertificateCertificatePtrOutput
}

type CertificateCertificatePtrOutput struct{ *pulumi.OutputState }

type CertificateState struct {
	// A `certificate` block as defined below, used to Import an existing certificate.
	Certificate CertificateCertificatePtrInput
	// The raw Key Vault Certificate data represented as a hexadecimal string.
	CertificateData pulumi.StringPtrInput
	// A `certificatePolicy` block as defined below.
	CertificatePolicy CertificateCertificatePolicyPtrInput
	// The ID of the Key Vault where the Certificate should be created.
	KeyVaultId pulumi.StringPtrInput
	// Specifies the name of the Key Vault Certificate. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// The ID of the associated Key Vault Secret.
	SecretId pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The X509 Thumbprint of the Key Vault Certificate represented as a hexadecimal string.
	Thumbprint pulumi.StringPtrInput
	// The current version of the Key Vault Certificate.
	Version pulumi.StringPtrInput
}

type GetKeyVaultAccessPolicy struct {
	// The Object ID of a Azure Active Directory Application.
	ApplicationId string `pulumi:"applicationId"`
	// A list of certificate permissions applicable to this Access Policy.
	CertificatePermissions []string `pulumi:"certificatePermissions"`
	// A list of key permissions applicable to this Access Policy.
	KeyPermissions []string `pulumi:"keyPermissions"`
	// An Object ID of a User, Service Principal or Security Group.
	ObjectId string `pulumi:"objectId"`
	// A list of secret permissions applicable to this Access Policy.
	SecretPermissions []string `pulumi:"secretPermissions"`
	// A list of storage permissions applicable to this Access Policy.
	StoragePermissions []string `pulumi:"storagePermissions"`
	// The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.
	TenantId string `pulumi:"tenantId"`
}

type GetKeyVaultAccessPolicyArgs struct {
	// The Object ID of a Azure Active Directory Application.
	ApplicationId pulumi.StringInput `pulumi:"applicationId"`
	// A list of certificate permissions applicable to this Access Policy.
	CertificatePermissions pulumi.StringArrayInput `pulumi:"certificatePermissions"`
	// A list of key permissions applicable to this Access Policy.
	KeyPermissions pulumi.StringArrayInput `pulumi:"keyPermissions"`
	// An Object ID of a User, Service Principal or Security Group.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// A list of secret permissions applicable to this Access Policy.
	SecretPermissions pulumi.StringArrayInput `pulumi:"secretPermissions"`
	// A list of storage permissions applicable to this Access Policy.
	StoragePermissions pulumi.StringArrayInput `pulumi:"storagePermissions"`
	// The Azure Active Directory Tenant ID used to authenticate requests for this Key Vault.
	TenantId pulumi.StringInput `pulumi:"tenantId"`
}

type GetKeyVaultAccessPolicyArray []GetKeyVaultAccessPolicyInput

type GetKeyVaultAccessPolicyArrayInput interface {
	pulumi.Input

	ToGetKeyVaultAccessPolicyArrayOutput() GetKeyVaultAccessPolicyArrayOutput
	ToGetKeyVaultAccessPolicyArrayOutputWithContext(context.Context) GetKeyVaultAccessPolicyArrayOutput
}

type GetKeyVaultAccessPolicyArrayOutput struct{ *pulumi.OutputState }

type GetKeyVaultAccessPolicyInput interface {
	pulumi.Input

	ToGetKeyVaultAccessPolicyOutput() GetKeyVaultAccessPolicyOutput
	ToGetKeyVaultAccessPolicyOutputWithContext(context.Context) GetKeyVaultAccessPolicyOutput
}

type GetKeyVaultAccessPolicyOutput struct{ *pulumi.OutputState }

type GetKeyVaultNetworkAcl struct {
	Bypass                  string   `pulumi:"bypass"`
	DefaultAction           string   `pulumi:"defaultAction"`
	IpRules                 []string `pulumi:"ipRules"`
	VirtualNetworkSubnetIds []string `pulumi:"virtualNetworkSubnetIds"`
}

type GetKeyVaultNetworkAclArgs struct {
	Bypass                  pulumi.StringInput      `pulumi:"bypass"`
	DefaultAction           pulumi.StringInput      `pulumi:"defaultAction"`
	IpRules                 pulumi.StringArrayInput `pulumi:"ipRules"`
	VirtualNetworkSubnetIds pulumi.StringArrayInput `pulumi:"virtualNetworkSubnetIds"`
}

type GetKeyVaultNetworkAclArray []GetKeyVaultNetworkAclInput

type GetKeyVaultNetworkAclArrayInput interface {
	pulumi.Input

	ToGetKeyVaultNetworkAclArrayOutput() GetKeyVaultNetworkAclArrayOutput
	ToGetKeyVaultNetworkAclArrayOutputWithContext(context.Context) GetKeyVaultNetworkAclArrayOutput
}

type GetKeyVaultNetworkAclArrayOutput struct{ *pulumi.OutputState }

type GetKeyVaultNetworkAclInput interface {
	pulumi.Input

	ToGetKeyVaultNetworkAclOutput() GetKeyVaultNetworkAclOutput
	ToGetKeyVaultNetworkAclOutputWithContext(context.Context) GetKeyVaultNetworkAclOutput
}

type GetKeyVaultNetworkAclOutput struct{ *pulumi.OutputState }

type Key struct {
	pulumi.CustomResourceState

	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-384`, `P-521`, and `SECP256K1`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringOutput `pulumi:"curve"`
	// The RSA public exponent of this Key Vault Key.
	E pulumi.StringOutput `pulumi:"e"`
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrOutput `pulumi:"expirationDate"`
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayOutput `pulumi:"keyOpts"`
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrOutput `pulumi:"keySize"`
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `Oct` (Octet), `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringOutput `pulumi:"keyType"`
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringOutput `pulumi:"keyVaultId"`
	// The RSA modulus of this Key Vault Key.
	N pulumi.StringOutput `pulumi:"n"`
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrOutput `pulumi:"notBeforeDate"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The current version of the Key Vault Key.
	Version pulumi.StringOutput `pulumi:"version"`
	// The EC X component of this Key Vault Key.
	X pulumi.StringOutput `pulumi:"x"`
	// The EC Y component of this Key Vault Key.
	Y pulumi.StringOutput `pulumi:"y"`
}

type KeyArgs struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-384`, `P-521`, and `SECP256K1`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrInput
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayInput
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrInput
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `Oct` (Octet), `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringInput
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringInput
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
}

type KeyState struct {
	// Specifies the curve to use when creating an `EC` key. Possible values are `P-256`, `P-384`, `P-521`, and `SECP256K1`. This field will be required in a future release if `keyType` is `EC` or `EC-HSM`. The API will default to `P-256` if nothing is specified. Changing this forces a new resource to be created.
	Curve pulumi.StringPtrInput
	// The RSA public exponent of this Key Vault Key.
	E pulumi.StringPtrInput
	// Expiration UTC datetime (Y-m-d'T'H:M:S'Z').
	ExpirationDate pulumi.StringPtrInput
	// A list of JSON web key operations. Possible values include: `decrypt`, `encrypt`, `sign`, `unwrapKey`, `verify` and `wrapKey`. Please note these values are case sensitive.
	KeyOpts pulumi.StringArrayInput
	// Specifies the Size of the RSA key to create in bytes. For example, 1024 or 2048. *Note*: This field is required if `keyType` is `RSA` or `RSA-HSM`. Changing this forces a new resource to be created.
	KeySize pulumi.IntPtrInput
	// Specifies the Key Type to use for this Key Vault Key. Possible values are `EC` (Elliptic Curve), `EC-HSM`, `Oct` (Octet), `RSA` and `RSA-HSM`. Changing this forces a new resource to be created.
	KeyType pulumi.StringPtrInput
	// The ID of the Key Vault where the Key should be created. Changing this forces a new resource to be created.
	KeyVaultId pulumi.StringPtrInput
	// The RSA modulus of this Key Vault Key.
	N pulumi.StringPtrInput
	// Specifies the name of the Key Vault Key. Changing this forces a new resource to be created.
	Name pulumi.StringPtrInput
	// Key not usable before the provided UTC datetime (Y-m-d'T'H:M:S'Z').
	NotBeforeDate pulumi.StringPtrInput
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapInput
	// The current version of the Key Vault Key.
	Version pulumi.StringPtrInput
	// The EC X component of this Key Vault Key.
	X pulumi.StringPtrInput
	// The EC Y component of this Key Vault Key.
	Y pulumi.StringPtrInput
}

type KeyVault struct {
	pulumi.CustomResourceState

	// A list of up to 16 objects describing access policies, as described below.
	AccessPolicies KeyVaultAccessPolicyArrayOutput `pulumi:"accessPolicies"`
	// Boolean flag to specify whether Azure Virtual Machines are permitted to retrieve certificates stored as secrets from the key vault. Defaults to `false`.
	EnabledForDeployment pulumi.BoolPtrOutput `pulumi:"enabledForDeployment"`
	// Boolean flag to specify whether Azure Disk Encryption is permitted to retrieve secrets from the vault and unwrap keys. Defaults to `false`.
	EnabledForDiskEncryption pulumi.BoolPtrOutput `pulumi:"enabledForDiskEncryption"`
	// Boolean flag to specify whether Azure Resource Manager is permitted to retrieve secrets from the key vault. Defaults to `false`.
	EnabledForTemplateDeployment pulumi.BoolPtrOutput `pulumi:"enabledForTemplateDeployment"`
	// Specifies the supported Azure location where the resource exists. Changing this forces a new resource to be created.
	Location pulumi.StringOutput `pulumi:"location"`
	// Specifies the name of the Key Vault. Changing this forces a new resource to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// A `networkAcls` block as defined below.
	NetworkAcls KeyVaultNetworkAclsOutput `pulumi:"networkAcls"`
	// Is Purge Protection enabled for this Key Vault? Defaults to `false`.
	PurgeProtectionEnabled pulumi.BoolPtrOutput `pulumi:"purgeProtectionEnabled"`
	// The name of the resource group in which to create the Key Vault. Changing this forces a new resource to be created.
	ResourceGroupName pulumi.StringOutput `pulumi:"resourceGroupName"`
	// The Name of the SKU used for this Key Vault. Possible values are `standard` and `premium`.
	SkuName pulumi.StringOutput `pulumi:"skuName"`
	// Should Soft Delete be enabled for this Key Vault? Defaults to `false`.
	SoftDeleteEnabled pulumi.BoolPtrOutput `pulumi:"softDeleteEnabled"`
	// A mapping of tags to assign to the resource.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
	// The URI of the Key Vault, used for performing operations on keys and secrets.
	VaultUri pulumi.StringOutput `pulumi:"vaultUri"`
}

type KeyVaultAccessPolicy struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId *string `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from the following: `backup`, `create`, `delete`, `deleteissuers`, `get`, `getissuers`, `import`, `list`, `listissuers`, `managecontacts`, `manageissuers`, `purge`, `recover`, `restore`, `setissuers` and `update`.
	CertificatePermissions []string `pulumi:"certificatePermissions"`
	// List of key permissions, must be one or more from the following: `backup`, `create`, `decrypt`, `delete`, `encrypt`, `get`, `import`, `list`, `purge`, `recover`, `restore`, `sign`, `unwrapKey`, `update`, `verify` and `wrapKey`.
	KeyPermissions []string `pulumi:"keyPermissions"`
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
	ObjectId string `pulumi:"objectId"`
	// List of secret permissions, must be one or more from the following: `backup`, `delete`, `get`, `list`, `purge`, `recover`, `restore` and `set`.
	SecretPermissions []string `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `backup`, `delete`, `deletesas`, `get`, `getsas`, `list`, `listsas`, `purge`, `recover`, `regeneratekey`, `restore`, `set`, `setsas` and `update`.
	StoragePermissions []string `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.
	TenantId string `pulumi:"tenantId"`
}

type KeyVaultAccessPolicyArgs struct {
	// The object ID of an Application in Azure Active Directory.
	ApplicationId pulumi.StringPtrInput `pulumi:"applicationId"`
	// List of certificate permissions, must be one or more from the following: `backup`, `create`, `delete`, `deleteissuers`, `get`, `getissuers`, `import`, `list`, `listissuers`, `managecontacts`, `manageissuers`, `purge`, `recover`, `restore`, `setissuers` and `update`.
	CertificatePermissions pulumi.StringArrayInput `pulumi:"certificatePermissions"`
	// List of key permissions, must be one or more from the following: `backup`, `create`, `decrypt`, `delete`, `encrypt`, `get`, `import`, `list`, `purge`, `recover`, `restore`, `sign`, `unwrapKey`, `update`, `verify` and `wrapKey`.
	KeyPermissions pulumi.StringArrayInput `pulumi:"keyPermissions"`
	// The object ID of a user, service principal or security group in the Azure Active Directory tenant for the vault. The object ID must be unique for the list of access policies.
	ObjectId pulumi.StringInput `pulumi:"objectId"`
	// List of secret permissions, must be one or more from the following: `backup`, `delete`, `get`, `list`, `purge`, `recover`, `restore` and `set`.
	SecretPermissions pulumi.StringArrayInput `pulumi:"secretPermissions"`
	// List of storage permissions, must be one or more from the following: `backup`, `delete`, `deletesas`, `get`, `getsas`, `list`, `listsas`, `purge`, `recover`, `regeneratekey`, `restore`, `set`, `setsas` and `update`.
	StoragePermissions pulumi.StringArrayInput `pulumi:"storagePermissions"`
	// The Azure Active Directory tenant ID that should be used for authenticating requests to the key vault. Must match the `tenantId` used above.
	TenantId pulumi.StringInput `pulumi:"tenantId"`
}

type KeyVaultAccessPolicyArray []KeyVaultAccessPolicyInput

type KeyVaultAccessPolicyArrayInput interface {
	pulumi.Input

	ToKeyVaultAccessPolicyArrayOutput() KeyVaultAccessPolicyArrayOutput
	ToKeyVaultAccessPolicyArrayOutputWithContext(context.Context) KeyVaultAccessPolicyArrayOutput
}

type KeyVaultAccessPolicyArrayOutput struct{ *pulumi.OutputState }

type KeyVaultAccessPolicyInput interface {
	pulumi.Input

	ToKeyVaultAccessPolicyOutput() KeyVaultAccessPolicyOutput
	ToKeyVaultAccessPolicyOutputWithContext(context.Context) KeyVaultAccessPolicyOutput
}

type KeyVaultAccessPolicyOutput struct{ *pulumi.OutputState }